Security Expert

Duties in coordination with L2 DSOC teams as escalation level for following activities
- Troubleshoot and resolve high-complexity customer faults effectively.
- Manage escalations with technology vendors and coordinate resolution efforts.
- Perform service changes, assess risks, and implement requests within the agreed Change Management process using Orange Change tools.
- Resolve service problems through root cause analysis and design action plans for unknown errors reported via the Problem Management Dashboard.
- Authorize, validate, and implement solution releases, including changes, upgrades, updates, patches, and migrations.
- Execute SIPs actions managed by senior engineers and update the action plan of the SIP.
- Participate in discussions and collaborate with other expert teams, including NOC, CSOC, System, and customer SPOCs, for activities within the scope of the service.
- For MS Defender, perform reactive and proactive tasks related to modules administration, secure score management, vulnerability score management, and daily health checks.

**Duties**:
Ability to communicate highly complex technical information clearly and articulately for all levels and audiences.

Be an active mentor and a trusted security advisor for the organization, driving our security culture.

Be the Subject Matter Expert in Microsoft security technologies.

Write, create and update documentation for internal teams, technical users and end users.

Work proactively to enhance compliance levels and participate at internal and customer audits (ISO ,SOC...etc)

Identify workflow improvements and curate new automations through our SOAR platform.

Collaborate with other teams to establish best practices and drive continuous improvement.

Collaborating with other teams and stakeholders to ensure security alignment and compliance across the organization.

Extended support during Major incidents, Complex changes, and crisis management

Leading projects related to on boarding new customers, new technologies or technologies migrations.

Leading projects related to on boarding new customers in terms of building the right interlock, processes, and operational model.

**about you**:
Qualifications:
Bachelor's Degree in Networking, Communication, Computer Science, or equivalent.

8+ years of experience in Network and Security administration, support, and implementation.

Solid experience in Networks, TCP/IP, and firewalls.

Expert level at MWP Microsoft offer with Microsoft Defender, specifically in modules of Endpoint, O365, Cloud Apps, identity, and cloud.

Expert level on Palo Alto, FortiGate firewall and Ivanti secure GW

Knowledge in technologies such as Azure Entra ID, On-premise Active Directory GPO, SCCM, MS Intune, Azure Sentinel (SIEM and SOAR), Azure Playbooks/Logic Apps.

Hands-on experience on IPAM, DNS, and DHCP management solutions for vendors like EIP (DDI).

Experience in release and vulnerability management.

Background in Secure NAC solutions and Aruba ClearPass (or similar solutions) is highly preferred.

Understanding of CISSP.

Supporting Certifications for the mentioned scope like Fortinet ,palo Alto, Cisco security ,Cybersecurity ,GRC ,SDWAN ,SASE ,Microsoft security ,Security design ,SOAR and DevSecOps

Knowledge and of ITIL practices

Exposure to cloud models (public, private, and hyper-converged)

Experience with SOAR systems like MS Sentinel and Palo Alto XSOAR.

A strong understanding of cyber-attacks, MITRE ATT&CK framework, emerging threats and threat modeling as well as security research techniques.

Hands on with and securing modern enterprise technologies such as containers, virtualization, cloud, orchestration, authentication, SSO, MFA, and zero trust architecture.

Knowledge of general security tools, such as firewalls, IPS, VPN, Load balancers, WAF, EDR, etc.

Ability to work with cloud platforms like AWS, Azure, and GCP.

**additional information**:
NA

**contract**:
Regular