Incident Handling Engineer (Cyber security - Telecom)

We are seeking a proactive and detail-oriented Incident Handling Engineer to join our cybersecurity team. The ideal candidate will be responsible for investigating and responding to security incidents, optimizing threat response models, and enhancing the organization’s security posture. This role requires advanced expertise in threat analysis, emergency response, and security operations.

Key Responsibilities:

1. Assist in identifying, analyzing, and mitigating major security incidents; implement appropriate handling strategies.
2. Respond to and investigate intrusions, malware infections, and advanced persistent threats; prepare detailed incident reports.
3. Optimize and implement threat operation models, playbooks, and visualization tools across networks, endpoints, and operational layers.
4. Analyze external vulnerabilities and threat landscapes, assess their impact on production environments, and implement emergency policies.
5. Design and enhance security operation service solutions and processes in alignment with business architecture; support implementation and knowledge transfer.
6. Collaborate with cross-functional teams and provide guidance on security operations and incident response practices.

Requirements:

• Minimum 3 years of experience in the cybersecurity field, with at least 1 year in telecom.
• In-depth understanding of TCP/IP protocols and ability to troubleshoot and resolve network security issues.
• Proficiency in log analysis, incident response, and threat investigation.
• Strong knowledge of OWASP Top 10 vulnerabilities and demonstrated ability to discover and analyze them independently.
• Hands-on experience with vulnerability assessment, penetration testing, and security gap analysis.
• Ability to develop and implement security service processes, playbooks, and O&M documentation.
• Experience in mentoring or guiding junior security engineers.
• Bachelor's degree in Cybersecurity, Computer Science, or a related discipline (preferred).
• Relevant certifications (e.g., CEH, GCIH, OSCP, CISSP) are a plus.
• Arabic Fluency

ONLY CANDIDATES WITH THE REQUIRED SKILLS AND EXPERIENCE WILL BE CONSIDERED