IT Security Lead

Suez Canal container Ter... -
Port Said, Egypt

Suez Canal container Terminal -
Port Said, Egyptposted 2 days ago

Job Details

Experience Needed:

Career Level:

Education Level:

Salary:

Job Categories:

Responsibilities:

Security Architecture & Strategy
Design, integrate, and maintain end-to-end security architecture for on-premises and cloud environments
Ensure secure network topology including segmentation, access control, and VPN tunnels
Lead development and enforcement of security policies, procedures, and best practices
Work closely with developers and IT architects to embed security into application and infrastructure design
SOC, SIEM, and Threat Management
Manage endpoint protection through EDR and threat-hunting solutions
Manage and enhance email security systems to protect against phishing, malware, and spam, ensuring compliance with organizational security policies
Lead incident response efforts and develop threat prevention strategies
Application and Cloud Security
Supervise vulnerability scanning and penetration testing for internally developed applications
Governance, Risk & Compliance (GRC)
Drive cybersecurity-related compliance programs.
Lead cross-functional GRC initiatives and support internal/external audits
Manage security risk assessments and recommend mitigation strategies
Documentation & Collaboration
Maintain detailed documentation for security controls, policies, systems, and incidents
Work collaboratively with software engineers, network teams, and business units

Requirements

Minimum Qualifications
- Education: Bachelor's degree in Engineering, Computer Science, Information Security, Cybersecurity, or a related discipline.
- Experience: Minimum of 4 years of hands-on experience in cybersecurity, information security, or related technical security roles.
Technical Expertise
Demonstrated experience and proficiency in:
- Designing and implementing security architectures for hybrid cloud and on-premises environments.
- Deploying, managing, and optimizing security technologies, including:
  - Firewalls
  - Web Application Firewalls (WAF)
  - Endpoint Detection and Response (EDR)
  - Security Information and Event Management (SIEM)
  - Unified Threat Management (UTM)
  - Intrusion Prevention Systems (IPS)
  - Secure Web Proxies
  - Distributed Denial-of-Service (DDoS) protection and mitigation solutions
- Network security design and operations, including security protocols, network segmentation, subnetting, VPN technologies, and access control models.
- Assessing security risks and implementing appropriate controls to safeguard enterprise systems, applications, and data.