Security Specialist \"End Point, DLP and Data mgmt.

PPL Dynamics; Doha; On-site; QAR 180,000 - 240,000; Full time

Job summary

PPL Dynamics is seeking a Security specialist to lead endpoint security, data loss prevention and incident response. The role emphasizes protecting information, monitoring for breaches, and implementing security controls across desktops, laptops, servers and mobile devices.

The candidate will work with SIEM, EDR/XDR, antivirus and DLP technologies, conduct risk assessments, and collaborate with IT and compliance teams to ensure regulatory adherence and ongoing security improvements.

Qualifications

• Minimum 5-6 years of cybersecurity experience, preferably in a SOC environment.
• Expertise in endpoint security, data loss prevention, and vulnerability management.
• Experience with incident response, threat hunting and security analytics.
• Knowledge of GDPR, HIPAA or equivalent data protection frameworks.

Responsibilities

• Develop, implement and manage security policies for endpoints and data protection.
• Act as first responder to security incidents; investigate and document findings.
• Monitor threats, perform risk assessments and recommend remediation actions.
• Manage security tools (SIEM/EDR/XDR/DLP) and ensure proper configuration.
• Collaborate with IT and compliance teams to maintain security standards.

Skills

Endpoint security

Incident response

DLP

EDR/XDR

Vulnerability management

Regulatory compliance

Threat analysis

Data protection

Tools

SIEM

IDS/IPS

Antivirus software

Tenable

Burp Suite

Microsoft Defender XDR

Endgame EDR

Microsoft Purview

Microsoft Priva

Job description

Security specialist Role Description- Endpoint Security and Data Leak Protection Analyst

Primary purpose of the role The Security specialist is responsible for the administration of the organization's information and data security policies and practices to ensure authorized users can readily access information and that the information is protected in terms of confidentiality, integrity and availability. Well follow security best practices guideline. In this role, need to handle all responsibility as following mentioned.

Service Management and Service Operation

Drafts and maintains the policy, standards, procedures, and documentation for security. Monitors the application and compliance of security operations procedures and reviews information systems for actual or potential breaches in security. Ensures that all identified breaches in security are promptly and thoroughly investigated. Ensures that any system changes required to maintain security are implemented. Ensures that security records are accurate and complete.

Strategy & Architecture and Information Strategy

Obtains and acts on vulnerability information and conducts security risk assessments for business applications and computer installations; provides authoritative advice and guidance on security strategies to manage the identified risk. Investigates major breaches of security and recommends appropriate control improvements. Interprets security policy and contributes to development of standards and guidelines that comply with this. Performs risk assessment, business impact analysis and accreditation for all major information systems within the organization. Ensures proportionate response to vulnerability information, including appropriate use of forensics.

Plan and priorities, Think and Solve Problems

• Consider future aims and goals of the team/unit and organization when prioritizing own and others' work
• Initiate, priorities, consult on and develop team/unit goals, strategies, and plans
• Anticipate and assess the impact of changes, such as government policy/economic conditions, on team/unit objectives and initiate appropriate responses
• Ensure current work plans and activities support and are consistent with organizational change initiatives
• Evaluate achievements and adjust future accordingly

Technology

• Demonstrate a sound understanding of technology relevant to the work unit, and identify and select the most appropriate technology for assigned tasks
• Identify opportunities to use a broad range of communications technologies to deliver effective messages
• Understand, act on and monitor compliance with information and communications security and use policies
• Identify ways to leverage the value of technology to achieve team/unit outcomes, using the existing technology of the business
• Support compliance with the records, information, and knowledge management requirements of the organization

Key accountabilities and Responsibilities

• Develop, implement, and manage security policies and protocols for endpoint devices including desktops, laptops, mobile devices, and servers.
• Technical hands-on experience with endpoint security
• Understanding of operating system, networking protocols, security and Internet environments
• Experience with systems installation, configuration and administration of operating systems and applications
• Experience installing, configuring and integrating a security environment
• Experience using application firewalls, SIEM, IDS/IPS etc.
• Experience with common enterprise desktop software deployment methodologies
• Design and enforce strategies to prevent the unauthorized transmission of sensitive information. Monitor and analyze data flows to identify and mitigate potential data breaches.
• Act as a first responder to security incidents involving endpoint devices and data leaks. Conduct thorough investigations, document findings, and recommend remediation actions.
• Continuously monitor security threats and vulnerabilities related to endpoints. Stay updated on the latest security trends and threat intelligence to proactively protect the organization.
• Collaborate with IT and compliance teams to develop and maintain endpoint security policies, standards, and guidelines. Ensure compliance with industry regulations and best practices.
• Manage and optimize security tools and technologies such as antivirus software, EDR, XDR, encryption solutions, and DLP systems. Ensure they are effectively configured and updated.
• Generate regular reports on the status of endpoint security and data leak prevention efforts. Provide insights and recommendations based on analysis and findings.
• Experience with data analysis and data quality assessment techniques
• Possesses knowledge of data lifecycle activities such as data definitions, data lineage (data life cycle that includes the data's origins, what happens and where it moves over time) and data quality
• Understands how data is used within business processes and its impact on desired business process outcomes
• Experience with data analysis and data quality assessment techniques
• Possesses knowledge of data lifecycle activities such as data definitions, data lineage and data quality
• Responsible for conducting vulnerability assessments and penetration tests to identify security weaknesses, evaluate risks, and recommend remediation measures.
• Following Products key responsibilities well know best practice security
• Minimum of 5-6 years of experience in cybersecurity, preferably within a SOC environment.
• Experience in incident response, threat hunting, DLP, and vulnerability management.
• Hands-on experience with Endpoint security monitoring and DLP analysis tools.
• Experience with regulatory and compliance frameworks such as GDPR, HIPAA, NIA, Qatar 2022 CSF, ISO 27001 is a plus.
• Strong knowledge of endpoint security solutions, DLP technologies, and antivirus software. Proficiency in security incident response and threat analysis.
• Excellent analytical and problem-solving skills. Ability to analyze complex security issues and develop effective solutions.
• High attention to detail to ensure accurate monitoring, analysis, and reporting.
• Strong verbal and written communication skills. Ability to clearly articulate security concepts to technical and non-technical audiences.
• Ability to work collaboratively with cross-functional teams and demonstrate a proactive approach to security challenges.
• Proven work experience with Microsoft Antivirus, Microsoft Defender XDR, Endgame EDR, Microsoft DLP, Microsoft Purview, Microsoft Insider Risk Management and Microsoft Priva is a must.
• Work experience with Vulnerability scanners like Tenable, Burp suite etc.
• Should have knowledge of data privacy and data protection.