ISA is a premier technology solution provider for the Aviation industry. We are backed by Air Arabia and headquartered in Sharjah, UAE. (www.isa.ae )
ISA (Information Systems Associates) is a premier in the field of Information Technology providing best-of-breed technology solutions for the global travel and aviation industry since 2005. We offer a wide range of tailor-made aviation technology
We are hiring! Senior Security Engineers - Lead
Colombo, Sri Lanka
Responsibilities for Senior Security Engineer
1. Serves as the subject matter expert for supported security technologies and during escalations; provides direction to infrastructure, operations, data, and application developments groups throughout the transitioning phase, implementation in production, and beyond.
2. Plans and directs the implementation and testing of security systems concept and architecture, and prepares security standards, policies, and procedures.
3. Implements cloud-based security for ISA products like (DDOS,WAF…) and for Network (IPS & IDS…); ensures security levels for all new appliances; recommends improvements where applicable.
4. Evaluates ISA/Clients standards, security controls, and industry best practices to determine network information security requirements and specifications and achieve successful solution delivery.
5. Maps all existing processes required for network and applications with focus on security architecture.
6. Ensures all applications within ISA are in line with agreed measures, compliant with PCIDSS3.20 and with audit and legal requirements.
7. Applies security DevOps best practices and methodologies integrated with DevOps processes by specifying intrusion detection methodologies and equipment; prepares preventive and reactive measures; creates, transmitting, and maintaining keys.
8. Conducts system security and vulnerability analyses and risk assessments, analyzes cyber technologies, metrics models and performance indicators, to recommend the appropriate architecture/platform.
9. Maintains security by monitoring and ensuring compliance to standards, policies, and procedures; conducts incident response analyses; maintains knowledge of engineering next-gen designs, security trends, threats, and attack techniques.
10. Regularly undertakes penetration testing across the network and application to assess performance capabilities (reliability, maintainability, and availability) versus security and risk, provides feedback to Governance team.
11. Builds and maintains effective relationships with security partners and vendors, management, peers, project managers, and internal customers.
12. Defines system security reports that provide insight into potential threat issues and threat analysis.
13. Updates job knowledge by tracking and understanding emerging security practices and standards. Conducts necessary trainings for ISA/clients when required.
14. Performs any other additional duties as directed by the line manager.
Qualifications for Security Engineer
5+ years in enterprise level IT environment, working as Security Engineer or a similar role.
Proven experience in the design of the practice network security architectures for large networks.
In-depth knowledge of two or more security technology platforms and tools (VMS, Brand abuse protection systems, Web monitoring, Elastic, MS defender…)
Operations and management of technology platforms – both internally and externally hosted.
Hands on technical leadership, technical solutions design, and architecture.
Proven skills in analyzing data, identifying pitfalls and recommending cost-effective solutions.
Capable of conducting cost-benefit analysis for IT investments.
Cost-oriented, possesses effective problem solving and decision-making skills.
Detail oriented, works well under pressure.
Ability to interact with a broad cross-section of personnel to explain and enforce security measures
Employs technical expertise, and interpersonal relations to achieve company’s objectives.
Please send your profiles to careers@isa.ae
.png)
