Cybersecurity Engineer

Responsibilities :

• Working with the team to manage all cybersecurity systems in Health Affairs, such as Firewall, WAF, SIEM, AV, EDR, Proxy.
• Continuous monitoring of alerts and security incidents.
• Classifying incidents into appropriate categories.
• Taking actions based on the severity of the incident, such as :
• Notifying system administrators.
• Following the incident response plan.
• Escalating incidents according to incident response procedures.
• Properly documenting incidents.
• Documenting and reporting incidents.
• Resolving issues related to user requests.
• Tracking cyberattacks and collecting information about attackers.
• Creating or updating use cases for new systems and applications.
• Analyzing cyber events and incidents reported by the Cybersecurity Authority.
• Conducting regular vulnerability scans against internal IP addresses.
• Monitoring the level of system compliance with the technical security standards of the National Guard, which will be approved by the IT department after evaluation.
• Communicating with other departments during incident investigations.
• Preparing a monthly report, which should summarize the main incidents that were handled.
• Maintaining and operating the latest available versions of cybersecurity systems in Health Affairs.
• Identifying, classifying, prioritizing, and investigating related events collected from firewalls, network devices, proxies, IDS / IPS systems, antivirus systems, databases, servers, and endpoints.

Requirements

Skills :