Information Security Engineer

TAT IT Technolgies; Muscat; On-site; OMR 15,000 - 30,000; Full time

Job summary

A leading company in the banking sector in Muscat seeks an Information Security Engineer to bolster their security team. The successful candidate will be responsible for threat detection, incident management, and compliance with industry standards. We are looking for someone with strong technical skills in security tools and experience with compliance regulations. There are opportunities for significant professional growth and impact within the organization.

Qualifications

• Certifications: CISSP, CISM, or CEH preferred.
• Knowledge of security frameworks (NIST, ISO 27001) and compliance regulations (HIPAA, PCI-DSS, GDPR).
• Ability to work under pressure and respond to incidents quickly.

Responsibilities

• Identify and respond to security threats through monitoring and investigation.
• Manage security incidents and restore systems to normal operations.
• Ensure compliance with regulatory requirements and develop security policies.

Skills

Analytical and problem-solving skills

Communication and collaboration skills

Technical expertise in security tools and technologies

Education

CISSP, CISM, or CEH certification

Tools

SIEM systems

Intrusion Detection Systems (IDS)

Firewalls

Antivirus software

Vulnerability scanning tools

Job description

We have an urgent requirement for Information Security Engineer is required for one of our banking client in Muscat Oman

Key Responsibilities

• Threat Detection and Response: Identify potential security threats through monitoring network traffic, system logs, and other data sources. Respond quickly to contain and mitigate threats.
• Incident Management: Investigate security incidents, contain breaches, and restore systems to normal operation.
• Vulnerability Management: Identify, classify, and prioritize vulnerabilities in systems and applications. Implement patches and fixes to prevent exploitation.
• Security Information and Event Management (SIEM): Use SIEM tools to monitor, analyze, and respond to security-related data from various sources.
• Compliance and Governance: Ensure security practices comply with regulatory requirements and industry standards.
• Security Awareness Training: Educate employees on security best practices and phishing attacks.
• Continuous Monitoring: Regularly review and update security controls, policies, and procedures.
• Compliance: Ensure compliance with regulatory requirements, such as HIPAA, PCI-DSS, and GDPR.
• Security Policies: Develop and implement security policies, procedures, and standards.
  
  

Skills Required

• Technical expertise in security tools and technologies
• Analytical and problem-solving skills
• Communication and collaboration skills
• Knowledge of security frameworks and regulations
• Ability to work under pressure and respond to incidents quickly
  
  

Tools And Technologies

• SIEM systems
• Intrusion Detection Systems (IDS)
• Firewalls
• Antivirus software
• Vulnerability scanning tools
  
  

Technical Skills

• Security frameworks and standards (NIST, ISO 27001)
• Security technologies (firewalls, intrusion detection systems, encryption)
• Compliance regulations (HIPAA, PCI-DSS, GDPR)
  
  

Certifications: CISSP, CISM, or CEH certification preferred.

Nice To Have

• Cloud Security: Experience with cloud security platforms (AWS, Azure, GCP).
• DevSecOps: Experience with DevSecOps practices and tools.
• Security Automation: Experience with security automation tools (SIEM, SOAR).
  
  

Skills: ability to work under pressure and respond to incidents quickly,technical expertise in security tools and technologies,firewalls,compliance regulations (hipaa, pci-dss, gdpr),vulnerability scanning tools,devsecops,cloud security,management,security frameworks and standards (nist, iso 27001),siem systems,communication and collaboration skills,analytical and problem-solving skills,security automation,antivirus software,knowledge of security frameworks and regulations,security,intrusion detection systems (ids),compliance