Security Integrations Senior Engineer

JOB PURPOSE / ROLE:To participate in implementation and configuration of new technologies as well review of existing systems of the BT Security integration systems and ensure the proper implementation of robust and scalable systems that meet the Riyad Bank’s business requirements as per the BT Policies and Procedures.AREAS OF RESPONSIBILITY:Policies, Processes & ProceduresFollows all relevant departmental policies, processes, standard operating procedures and instructions so that work is carried out in a controlled and consistent mannerDay- to-day operationsFollows the day-to-day operations related to own job to ensure continuity of workOperation WorkParticipate in research, designing, building and implementation of enterprise wide network security solutions/ capabilities/ enhancements that enhances the overall security of Riyad Bank.Analyses, tests and implementation of state-of-the-art secure system Security.Conduct reviews of security Integrations setup and provide recommendations on integration of security strategy and network instrumentation to support cyber security.Oversee security infrastructure sustainment, maintenance, and advanced configuration of all the BT Security systems.Convert business requirements into technical specifications with formalized use cases.Create solutions that balance BT requirements with information and cyber security requirements.Participating in Proof of Concepts, acquiring new products and evaluating new technologies.Align standards, frameworks and security with overall BT deployment.Maintaining and updating BT security integration landscape.Provide assistance in troubleshooting Integration Security operational issues in a timely manner.Ensure the satisfaction of both internal and external customers by addressing their needs in a courteous and timely manner.Team lead and supportEnsure best team lead and knowledge transfers for the Staff in the function.Continuous Improvement Contributes to the identification of opportunities for continuous improvement of processes and practices taking into account ‘international best practice’, improvement of business processes, cost reduction and productivity improvementReportingAssists in the preparation of timely and accurate reports of Riyad Bank to meet company and department requirements, policies and standardsSafety, Quality & EnvironmentComplies with all relevant safety, quality and environmental management policies, procedures and controls to ensure a healthy and safe work environmentRelated AssignmentsPerforms other related duties or assignments as directed within the confinement of the departmental roles and responsibilities.QUALIFICATIONS & EXPERIENCE:Minimum Qualifications:Bachelor’s degree in Computer Science, Information Technology or equivalent.Certifications relevant to cyber security operations or equivalentMinimum Experience:4-6 years of relevant experience Technical Knowledge areas: Good knowledge of Banking systems and applicationsKnowledge of the banking operations and requirements Advanced knowledge and understanding information security and relevant tools and systems Very good knowledge of the programming languages and systems used by the BankExcellent knowledge of the SDLC process and componentsUnderstand network security architecture concepts such as topology and protocols.Understand what constitutes network risk, cyberattacks, and the relationship between threats and vulnerabilities.Advanced Knowledge of Common Vulnerabilities and Exposures (CVEs), cyber threats, and vulnerability mitigation strategies.Experience of Security configuration review of database /servers / firewalls / switches / routers, etcExperience on network, web application/ web services penetration testing & secure code review of applicationsAdvanced Knowledge of operating systems windows, linux etc. network equipment’s system and network hardeningAdvanced Knowledge of Advanced Persistent Threat (APT) actors and associated tools, techniques, and procedures (TTPs)Advanced Knowledge of cyber threat intelligence analytic frameworks including Cyber Kill Chain and Mitre ATT&CK.