Security Engineer
Smart Technology Services DWC-LLC
Total years of experience :10 years, 2 Months
Operate and maintain technical security systems. The operations is 24x7. The role requires implementation and operation of security controls across ICT landscape. Enforces security policies and procedures by administering and monitoring security profiles, reviews security violation reports and investigates possible security exceptions, updates, and maintains and documents security controls.
Security Administration
• Investigates identified security breaches in accordance with established procedures and recommends any required actions.
• Assists users in defining their access rights and privileges, and administers logical access controls and security systems.
• Maintains security records and documentation.
Business Risk Management
• Carries out risk assessment within a defined functional or technical area of business.
• Uses consistent processes for identifying potential risk events, quantifying and documenting the probability of occurrence and the impact on the business.
• Refers to domain experts for guidance on specialized areas of risk, such as architecture and environment. Co-ordinates the development of countermeasures and contingency plans.
Information Security
• Conducts security risk and vulnerability assessments for defined business applications or IT installations in defined areas, and provides advice and guidance on the application and operation of elementary physical, procedural and technical security controls (e.g. the key controls defined in ISO27001).
• Performs risk and vulnerability assessments, and business impact analysis for medium size information systems.
• Investigates suspected attacks and manages security incidents.
Data management
• Takes responsibility for the accessibility, retrievability and security of specific subsets of information.
• Provides advice on the transformation of information from one format/medium to another, where appropriate.
• Maintains and implements information handling procedures.
• Enables the availability, integrity and searchability of information through the application of formal data structures and protection measures.
• Manipulates specific data from information services, to satisfy local or specific information needs.
Service level management
• Performs defined tasks to monitor service delivery against service level agreements and maintains records of relevant information.
• Analyses service records against agreed service levels regularly to identify actions required to maintain or improve levels of service, and initiates or reports these actions
Configuration management
• Manages configuration items (CIs) and related information.
• Applies and maintains tools, techniques and processes for identification, classification and control of CIs and ensuring related information is complete, current and accurate.
Change management
• Assesses, analyses, develops, documents and implements changes based on requests for change.
Continuity management
• Provides input to the service continuity planning process and implements resulting plans.
Conformance review
• Collects and collates evidence as part of a formally conducted and planned review of activities, processes, products or services.
• Examines records as part of specified testing strategies for evidence of compliance with management directives, or the identification of abnormal occurrences.
Testing
• Defines test conditions for given requirements. Designs test cases and creates test scripts and supporting data, working to the specifications provided. Interprets, executes and records test cases in accordance with project test plans. Analyses and reports test activities and results. Identifies and reports issues and risks.