وظيفة تمهير - أمن تقنية المعلومات شاغرة لدى بوبا العربية بجدة

Role Purpose:

Support the Information Security team in   monitoring, maintaining, and improving the  organization's information security controls across   endpoint, network, data protection, cloud, and   enterprise security environments. The trainee will   gain hands-on exposure to security monitoring,   vulnerability management, security operations,  governance activities, compliance practices, and   enterprise security technologies while supporting   day-to-day Information Security operations and  learning industry best practices.

1. Information Security Monitoring & Operations

• Assist in monitoring enterprise security technologies and security events.

• Support information security monitoring and operational activities.

• Participate in vulnerability management and remediation tracking activities.

• Assist in security investigations, incident handling, and event analysis activities.

• Support monitoring of endpoint, network, email, and data protection security controls.

2.Security Technologies Monitoring

• Support monitoring and operation of security technologies including SIEM, EDR, NDR, Firewall Security, Web Application Security, Email Security, DNS Security, Proxy Security, Secure File Transfer Solutions, Vulnerability Management, and Data Protection controls.

• Assist in identifying, analyzing, and escalating security events when required.

• Participate in information security monitoring, reporting, and operational activities.

• Support continuous improvement of security monitoring processes and controls.

3. Data Protection & Compliance

• Support Data Loss Prevention (DLP) monitoring activities.

• Assist in data classification and information protection initiatives.

• Participate in compliance monitoring and audit-related activities.

• Assist in information security awareness and compliance initiatives.

4.Governance, Access & Risk Management

• Assist in access review and identity access management activities.

• Support least privilege and information access governance practices.

• Participate in vulnerability and risk assessment activities.

• Assist in reviewing security controls and tracking remediation activities.

• Support compliance and governance-related initiatives.

5.Documentation, Reporting & Audit Readiness

• Maintain information security documentation and records.

• Assist in preparing reports related to information security operations, compliance, and security posture.

• Support internal and external audit readiness activities.

6. Collaboration & Continuous Improvement

• Collaborate with Information Security, Infrastructure, Network, Cloud, and Application teams on security initiatives.

• Support process improvement, documentation, and operational activities.

• Participate in knowledge-sharing and continuous improvement initiatives.

• Assist in developing and maintaining operational procedures and playbooks.

• Basic understanding of Information Security concepts and enterprise security technologies.

• Basic knowledge of SIEM, EDR, NDR, Firewall Security, Web Application Security, Email Security, DNS Security, Proxy Security, Vulnerability Management, Data Loss Prevention (DLP), Identity & Access Management (IAM), and Secure File Transfer Solutions.

• Basic understanding of Windows, Linux, and Networking concepts

• Strong analytical, troubleshooting, communication, and reporting skills

• Participation in cybersecurity development programs such as CyberHub, CyberPro, or equivalent programs is preferred.

• Completion of cybersecurity training, internships, technical labs, or learning platforms such as TryHackMe, Hack The Box, LetsDefend, Blue Team Labs Online, PortSwigger Web Security Academy, or similar platforms is preferred.

• CompTIA Security+ certification is preferred.

• Excellent communication and collaboration skills to work cross-functionally.

Information Security, Information Technology, Computer Science, or related fields