Senior Information Security Specialist

Nexcel Computer Solutions; Manama; On-site; BHD 22,500 - 27,500; Full time

Job summary

An established industry player is seeking a seasoned security expert to safeguard their on-prem and cloud environments. This role involves designing robust security solutions, conducting regular assessments, and responding to security incidents. You will be responsible for maintaining best practices, managing access controls, and ensuring compliance with security standards. The ideal candidate will have extensive experience with security tools and frameworks, including firewalls and SIEM systems. Join a forward-thinking organization that prioritizes innovation and security, and make a significant impact in protecting vital systems and data.

Qualifications

• Minimum of 10 years of experience in security roles.
• B.Sc. in Computer Engineering or equivalent required.

Responsibilities

• Monitor systems to ensure 24/7 availability and security.
• Design and implement security solutions for cloud and on-prem infrastructure.

Skills

Security Incident Handling & Response

Security Management Frameworks

Firewall/IDS/IPS (Palo Alto, Fortinet, Cisco)

Vulnerability Management (VAPT)

SIEM Management

Data Management Protection

Advanced Malware Prevention

Identity & Access Management

AWS (IAM, KMS, VPC)

Logging and Monitoring

Education

B.Sc. in Computer Engineering or Equivalent

Tools

Palo Alto

Fortinet

Cisco

AWS

SIEM

WAF

Job description

Roles & Responsibilities:

• Monitoring the system and ensuring the system is available 24/7.
• Maintain best practices and security standards.
• Design and implement security solutions that protect the organization's On-prem / cloud infrastructure, applications, and data from security threats.
• Conduct regular security assessments of the organization's On-prem / cloud environment to identify potential security vulnerabilities and recommend appropriate remediation measures.
• Configure and maintain various security tools such as firewalls, intrusion detection and prevention systems, and security information and event management (SIEM) systems to ensure optimal protection against security threats.
• Regularly monitor the syslogs and take corrective actions if any security breaches or vulnerabilities are found in the logs.
• Run VAPT tools to mitigate security vulnerabilities.
• Manage access controls for cloud resources, including user authentication and authorization, identity and access management (IAM), and network security groups (NSGs).
• Monitor the On-prem / cloud environment for security incidents and respond promptly to any security breaches or threats.
• Create and maintain security policies and procedures for the organization's On-prem / cloud environment, including disaster recovery plans, incident response plans, and security awareness training for employees.
• Keep up-to-date with the latest security trends and best practices to ensure that the organization's On-prem / cloud environment remains secure against evolving security threats.
• Review and apply the WAF policies to protect against DDoS and application-related attacks.
• Test the WAF rules and ensure they block malicious traffic.

Qualifications & Technical Skills:

1. Minimum of 10 years of experience.

• B.Sc. in Computer Engineering or Equivalent.

• Security Incident Handling & Response

• Security Management Frameworks

• Firewall/IDS/IPS (Palo Alto, Fortinet, Cisco, etc.)

• Vulnerability Management (VAPT)

• SIEM Management

• Data Management Protection

• Advanced Malware Prevention

• Identity & Access Management

• AWS: IAM, KMS, VPC, Security Groups, Network ACLs, VPC endpoints, CloudWatch, VPC Flow Logs

• Logging and Monitoring, SIEM, Syslog

• CloudFront, WAF and Certificate Management

• Technical Certifications like CEH, Security+, CISSP, etc.