وظيفة مستشار أمن سيبراني - استخبارات التهديدات لدى علم في مدينة الرياض

Job Description

OVERVIEW

Job Title

Consultant

Job Code

679315

Grade

I3

Group

-

Division

Legal, Risk & Governance

Department

Cybersecurity

Unit

TI&BP

ROLE PURPOSE

The aim is to state the overall significance of the job from the organization’s perspective.

The role exists to perform cyber threat intelligence and brand protection activities by identifying, analyzing, and communicating emerging cyber threats, monitoring external threat exposure, and supporting proactive threat hunting and digital brand protection to enhance Elm's cybersecurity posture and enable informed security decision-making.

KEY ACCOUNTABILITIES & ACTIVITIES

This section describes the principal outputs required from the job.

Key Accountabilities

Key Activities

1. Cyber Threat Intelligence

• Collect and analyze cyber threat intelligence from relevant internal and external sources.
• Assess threat actors, techniques, indicators, and emerging cyber threats relevant to Elm.
• Produce actionable intelligence to support cybersecurity operations and decision-making.

1. External Threat Landscape Monitoring

• Monitor the external cyber threat landscape for threats relevant to Elm and its digital assets.
• Analyze emerging attack campaigns, vulnerabilities, and threat trends.
• Communicate significant threats and recommended actions to relevant stakeholders.

1. Dark Web & Digital Exposure Monitoring

• Monitor dark web and external digital sources for potential threats, leaked information, and malicious activities.
• Investigate identified exposures and assess their potential impact.
• Coordinate appropriate response and escalation actions.

1. Phishing & Fraud Threat Analysis

• Monitor and analyze phishing campaigns, fraudulent activities, and impersonation attempts.
• Identify indicators and patterns associated with malicious campaigns.
• Recommend preventive and responsive actions to reduce exposure.

1. Brand & Digital Asset Protection

• Monitor digital channels for unauthorized use, impersonation, and abuse of Elm's brand and digital assets.
• Assess identified brand protection incidents and coordinate required actions.
• Support takedown and remediation activities with relevant stakeholders.

1. Proactive Threat Hunting

• Conduct proactive threat hunting activities in coordination with SOC and other cybersecurity functions.
• Develop hypotheses based on threat intelligence and identified attack patterns.
• Analyze findings and communicate actionable indicators and recommendations.

1. Threat Intelligence Reporting

• Prepare strategic and operational cyber threat intelligence reports.
• Translate technical threat information into relevant security and business insights.
• Provide periodic and ad hoc threat updates to relevant stakeholders.

1. Threat Intelligence Capability Improvement

• Evaluate threat intelligence sources, tools, and methodologies.
• Recommend improvements to enhance intelligence quality and operational effectiveness.
• Contribute to maintaining structured threat intelligence practices and knowledge repositories.

1. Policies, Processes & Procedures

• Follow all relevant departmental policies, processes, standard operating procedures, and instructions so that work is carried out in a controlled and consistent manner.
• Comply with all relevant safety, quality, and environmental management policies, procedures, and controls to ensure a healthy and safe work environment.

1. Information Security

• Comply with all relevant information security practices and standards to ensure data integrity and confidentiality.

JOB SPECIFICATIONS

Academic and professional qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Computer Engineering, or a related field.
• Professional certifications in Threat Intelligence, SOC, Incident Response, or related cybersecurity disciplines are considered an advantage.

Years and Nature of Experience

• 4-6 years of experience in cyber threat intelligence, threat hunting, brand protection, security operations, or related cybersecurity domains.