Security Specialist \"End Point, DLP and Data mgmt. (12 month contract)

Employment; Doha; Vor Ort; QAR 180.000 - 250.000; Vollzeit

Zusammenfassung

The International Committee of the Red Cross (ICRC) in Qatar, Doha, seeks a Security Specialist focused on Endpoint, DLP and data management for a 12‑month contract. You will administer information security policies, monitor incidents, and lead breach investigations while ensuring confidentiality, integrity and availability of data.

Ideal candidates have 5–6 years in cybersecurity (SOC preferred), hands‑on experience with Microsoft Defender XDR, DLP, Purview and vulnerability management, plus

Qualifikationen

• Minimum 5–6 years in cybersecurity, preferably within a SOC.
• Experience with endpoint security monitoring and DLP analysis tools.
• Strong analytical and problem-solving skills.

Aufgaben

• Develop, implement and manage security policies for endpoints and data protection.
• Act as first responder to security incidents involving endpoints and data leaks.
• Collaborate with IT and compliance teams to ensure security standards and regulatory compliance.

Kenntnisse

Endpoint security

DLP

Threat analysis

Incident response

Regulatory compliance

Tools

Microsoft Defender XDR

Microsoft Purview

Tenable

Burp Suite

Jobbeschreibung

Security Specialist "End Point, DLP and Data mgmt. (12 month contract)

About the job Security Specialist "End Point, DLP and Data mgmt. (12 month contract)

Security specialist Role Description- Endpoint Security and Data Leak Protection Analyst

Primary purpose of the role

The Security specialist is responsible for the administration of the organization's information and data security policies and practices to ensure authorized users can readily access information and that the information is protected in terms of confidentiality, integrity and availability. Well follow security best practices guideline. In this role, need to handle all responsibility as following mentioned.

Service Management and Service Operation

• Drafts and maintains the policy, standards, procedures, and documentation for security.
• Monitors the application and compliance of security operations procedures and reviews information systems for actual or potential breaches in security.
• Ensures that all identified breaches in security are promptly and thoroughly investigated.
• Ensures that any system changes required to maintain security are implemented.
• Ensures that security records are accurate and complete.

Strategy & Architecture and Information Strategy

• Obtains and acts on vulnerability information and conducts security risk assessments for business applications and computer installations; provides authoritative advice and guidance on security strategies to manage the identified risk.
• Investigates major breaches of security and recommends appropriate control improvements.
• Interprets security policy and contributes to development of standards and guidelines that comply with this.
• Performs risk assessment, business impact analysis and accreditation for all major information systems within the organization.
• Ensures proportionate response to vulnerability information, including appropriate use of forensics.

Plan and priorities, Think and Solve Problems

• Consider future aims and goals of the team/unit and organization when prioritizing own and others' work
• Initiate, priorities, consult on and develop team/unit goals, strategies, and plans
• Anticipate and assess the impact of changes, such as government policy/economic conditions, on team/unit objectives and initiate appropriate responses
• Ensure current work plans and activities support and are consistent with organizational change initiatives
• Evaluate achievements and adjust future accordingly

Technology

• Demonstrate a sound understanding of technology relevant to the work unit, and identify and select the most appropriate technology for assigned tasks
• Identify opportunities to use a broad range of communications technologies to deliver effective messages
• Understand, act on and monitor compliance with information and communications security and use policies
• Identify ways to leverage the value of technology to achieve team/unit outcomes, using the existing technology of the business
• Support compliance with the records, information, and knowledge management requirements of the organization

Key accountabilities and Responsibilities

• Develop, implement, and manage security policies and protocols for endpoint devices including desktops, laptops, mobile devices, and servers.
• Technical hands-on experience with endpoint security
• Understanding of operating system, networking protocols, security and Internet environments
• Experience with systems installation, configuration and administration of operating systems and applications
• Experience installing, configuring and integrating a security environment
• Experience using application firewalls, SIEM, IDS/IPS etc.
• Experience with common enterprise desktop software deployment methodologies
• Design and enforce strategies to prevent the unauthorized transmission of sensitive information. Monitor and analyze data flows to identify and mitigate potential data breaches.
• Act as a first responder to security incidents involving endpoint devices and data leaks. Conduct thorough investigations, document findings, and recommend remediation actions.
• Continuously monitor security threats and vulnerabilities related to endpoints. Stay updated on the latest security trends and threat intelligence to proactively protect the organization.
• Collaborate with IT and compliance teams to develop and maintain endpoint security policies, standards, and guidelines. Ensure compliance with industry regulations and best practices.
• Manage and optimize security tools and technologies such as antivirus software, EDR, XDR, encryption solutions, and DLP systems. Ensure they are effectively configured and updated.
• Generate regular reports on the status of endpoint security and data leak prevention efforts. Provide insights and recommendations based on analysis and findings.
• Experience with data analysis and data quality assessment techniques
• Possesses knowledge of data lifecycle activities such as data definitions, data lineage (data life cycle that includes the data's origins, what happens and where it moves over time) and data quality
• Understands how data is used within business processes and its impact on desired business process outcomes
• Experience with data analysis and data quality assessment techniques
• Possesses knowledge of data lifecycle activities such as data definitions, data lineage and data quality
• Responsible for conducting vulnerability assessments and penetration tests to identify security weaknesses, evaluate risks, and recommend remediation measures.
• Following Products key responsibilities well know best practice security
• Minimum of 5-6 years of experience in cybersecurity, preferably within a SOC
• Experience in incident response, threat hunting, DLP, and vulnerability management.
• Hands-on experience with Endpoint security monitoring and DLP analysis tools.
• Experience with regulatory and compliance frameworks such as GDPR, HIPAA, NIA, Qatar 2022 CSF, ISO 27001 is a plus.
• Strong knowledge of endpoint security solutions, DLP technologies, and antivirus software. Proficiency in security incident response and threat analysis.
• Excellent analytical and problem-solving skills. Ability to analyze complex security issues and develop effective solutions.
• High attention to detail to ensure accurate monitoring, analysis, and reporting.
• Strong verbal and written communication skills. Ability to clearly articulate security concepts to technical and non-technical audiences.
• Ability to work collaboratively with cross-functional teams and demonstrate a proactive approach to security challenges.
• Proven work experience with Microsoft Antivirus, Microsoft Defender XDR, Endgame EDR, Microsoft DLP, Microsoft Purview, Microsoft Insider Risk Management and Microsoft Priva is a must.
• Work experience with Vulnerability scanners like Tenable, Burp suite etc.
• Should have knowledge of data privacy and data protection.

International Committee of the Red Cross - ICRC - Qatar, Doha

Madre integrated Engineering - Qatar, Doha