Cyber Security Sr. Technician

Responsibilities:

1. Maintenance and routine activities of the cybersecurity solutions deployed at site
   • Corrective Maintenance
   • Preventive Maintenance
   • Patch Management
   • Antivirus Updates
   • Applications Whitelisting
   • Network Monitoring
   • Anomaly Detection
   • Online / Offline / Offsite backup
   • Firewall rules management (add/modify/review/cleanup)
   • Domain users’ management; Domain policy management
   • System Hardening
   • Local Incident Response in case of Cybersecurity Incident
   • Investigate and respond to alerts from SOC.
2. Install, configure, and maintain cyber security tools and technologies, including firewalls, intrusion detection/prevention systems (IDS/IPS), and endpoint protection solutions.
3. Investigate security incidents and breaches, performing forensic analysis and implementing remediation actions to contain and mitigate the impact.
4. Collaborate with internal teams and external vendors to implement security controls and measures in alignment with industry standards and best practices.
5. Develop and maintain documentation, including standard operating procedures (SOPs), technical manuals, and incident response plans.
6. Provide guidance and support to junior technicians on cyber security tasks and procedures.
7. Stay abreast of emerging threats and security trends, researching and evaluating new technologies and methodologies to enhance cyber security defenses.
8. Participate in incident response exercises and drills to test and validate cyber security incident response plans.
9. Liaise with regulatory authorities and auditors during cyber security assessments and compliance audits.
10. CONTRACTOR shall collaborate and work closely with OMS section. OMS are the OT Cybersecurity SMEs for Operations. The mandate OMS covers, but not limited to:
    • Projects
      • Provide advisory and support to Operations for the deployment of cybersecurity solutions, including cybersecurity scope of work definition, detailed engineering, design review, specifications review and commissioning activities (FAT, IFAT, SAT).
    • Operations
      • First level of assurance: hygiene and hardening checks, configuration review, etc.
      • Support assets for cybersecurity routine maintenance activities.
    • Common Services
      • Build, deploy, and operate the centralized industrial cybersecurity services deployed within OT Common DMZ infrastructure.