وظيفة مهندس أول تكامل أمني شاغرة لدى بنك الرياض في الرياض

JOB PURPOSE / ROLE:

To participate in implementation and configuration of new technologies as well review of existing systems of the BT Security integration systems and ensure the proper implementation of robust and scalable systems that meet the Riyad Bank’s business requirements as per the BT Policies and Procedures.

AREAS OF RESPONSIBILITY:

Policies, Processes & Procedures

• Follows all relevant departmental policies, processes, standard operating procedures and instructions so that work is carried out in a controlled and consistent manner

Day- to-day operations

• Follows the day-to-day operations related to own job to ensure continuity of work

Operation Work

• Participate in research, designing, building and implementation of enterprise wide network security solutions/ capabilities/ enhancements that enhances the overall security of Riyad Bank.
• Analyses, tests and implementation of state-of-the-art secure system Security.
• Conduct reviews of security Integrations setup and provide recommendations on integration of security strategy and network instrumentation to support cyber security.
• Oversee security infrastructure sustainment, maintenance, and advanced configuration of all the BT Security systems.
• Convert business requirements into technical specifications with formalized use cases.
• Create solutions that balance BT requirements with information and cyber security requirements.
• Participating in Proof of Concepts, acquiring new products and evaluating new technologies.
• Align standards, frameworks and security with overall BT deployment.
• Maintaining and updating BT security integration landscape.
• Provide assistance in troubleshooting Integration Security operational issues in a timely manner.
• Ensure the satisfaction of both internal and external customers by addressing their needs in a courteous and timely manner.

Team lead and support

• Ensure best team lead and knowledge transfers for the Staff in the function.

Continuous Improvement

• Contributes to the identification of opportunities for continuous improvement of processes and practices taking into account ‘international best practice’, improvement of business processes, cost reduction and productivity improvement

Reporting

• Assists in the preparation of timely and accurate reports of Riyad Bank to meet company and department requirements, policies and standards

Safety, Quality & Environment

• Complies with all relevant safety, quality and environmental management policies, procedures and controls to ensure a healthy and safe work environment

Related Assignments

• Performs other related duties or assignments as directed within the confinement of the departmental roles and responsibilities.

QUALIFICATIONS & EXPERIENCE:

Minimum Qualifications:

• Bachelor’s degree in Computer Science, Information Technology or equivalent.
• Certifications relevant to cyber security operations or equivalent

Minimum Experience:

• 4-6 years of relevant experience

Technical Knowledge areas:

• Good knowledge of Banking systems and applications
• Knowledge of the banking operations and requirements
• Advanced knowledge and understanding information security and relevant tools and systems
• Very good knowledge of the programming languages and systems used by the Bank
• Excellent knowledge of the SDLC process and components
• Understand network security architecture concepts such as topology and protocols.
• Understand what constitutes network risk, cyberattacks, and the relationship between threats and vulnerabilities.
• Advanced Knowledge of Common Vulnerabilities and Exposures (CVEs), cyber threats, and vulnerability mitigation strategies.
• Experience of Security configuration review of database /servers / firewalls / switches / routers, etc
• Experience on network, web application/ web services penetration testing & secure code review of applications
• Advanced Knowledge of operating systems windows, linux etc. network equipment’s system and network hardening
• Advanced Knowledge of Advanced Persistent Threat (APT) actors and associated tools, techniques, and procedures (TTPs)
• Advanced Knowledge of cyber threat intelligence analytic frameworks including Cyber Kill Chain and Mitre ATT&CK.