وظائف مهندسى امن معلومات في الأردن

<section><p class="heading jdMain">Job Description</p><p class="heading">Roles &amp; Responsibilities</p><div class="paragraph"><p> <strong>About Acuative :</strong> </p> <p> <strong>Acuative </strong>is a global IT solutions provider committed to delivering top-tier managed services, managed solutions, and network infrastructure support. With a client-first mindset and a relentless drive for excellence, we empower organizations to scale securely and efficiently. Our success is powered by our people we invest in our employees through continuous on-the-job training, mentorship, and assisted learning that helps to grow our teams. At Acuative, you ll find a collaborative environment built on professionalism, innovation, and the shared pursuit of achieving high results. Join us and help shape the future of IT.</p> <p> <strong>Role Overview :</strong> </p> <p>The Implementation Analyst supports network deployment projects by acting as the main technical contact for on-site technicians, troubleshooting complex issues, and improving processes through automation and scripting. The role ensures smooth project execution, accurate documentation, and effective issue resolution.</p> <p> <strong>Key Responsibilities :</strong> </p> <p>- Serve as the primary technical contact during project implementations.</p> <p>- Configure and troubleshoot routers, switches, firewalls, and wireless devices.</p> <p>- Support WAN circuit turn-ups and network technologies (VLANs, OSPF, BGP, ACLs, VPNs, etc.).</p> <p>- Work across vendors such as Cisco, Fortinet, Palo Alto, and Cradlepoint.</p> <p>- Develop scripts and automation to improve efficiency.</p> <p>- Collaborate with Engineering to maintain runbooks and processes.</p> <p>- Act as an escalation point for technical issues.</p> <p>- Track issues and maintain project documentation.</p> <p>- Support team development through mentorship.</p> <p> <strong>Qualifications :</strong> </p> <p>- CCNA (or equivalent experience).</p> <p>- Fortinet NSE4 (or equivalent).</p> <p>- Strong networking fundamentals and troubleshooting skills.</p> <p>- Experience with WAN, telecom, or Wi-Fi environments (preferred).</p> <p>- Process-driven with good documentation and communication skills.</p></div></section>

<p><h4>Description</h4> <p>The penetration tester is responsible for conducting authorized security assessments across enterprise, government, and critical infrastructure environments to identify, validate, and report security vulnerabilities. As part of ZainTECH's cybersecurity practice, the role supports the delivery of penetration testing engagements across infrastructure, web, wireless, and applications.</p> <p>The penetration tester performs hands-on offensive security testing, validates exploitability of identified vulnerabilities, and delivers clear, actionable remediation guidance to customers. The role works closely with cybersecurity consultants, advisory teams, and customer stakeholders to help strengthen security posture and reduce organizational risk across the MENA region.</p> <h4>Responsibilities</h4> <p><strong>Penetration testing & security assessments</strong></p> <ul> <li>Conduct penetration testing engagements across: external and internal networks, web applications, APIs and web services, wireless environments, infrastructure and supporting systems</li> <li>Execute testing activities in accordance with approved methodologies, industry standards, and customer-defined rules of engagement</li> <li>Identify, validate, and safely demonstrate security vulnerabilities and attack paths</li> <li>Assess exploitability, business impact, and risk exposure associated with identified findings</li> <li>Perform security validation and retesting activities following remediation efforts</li> </ul> <p><strong>Vulnerability analysis & reporting</strong></p> <ul> <li>Analyze identified vulnerabilities and security weaknesses to determine potential business impact</li> <li>Develop detailed technical findings and remediation recommendations</li> <li>Produce high-quality penetration testing reports that clearly communicate: vulnerability details, risk ratings, attack scenarios, business impact, remediation guidance</li> <li>Ensure findings are reproducible, technically accurate, and aligned with industry best practices</li> </ul> <p><strong>Testing governance & compliance</strong></p> <ul> <li>Conduct all testing activities within approved scope and rules of engagement</li> <li>Ensure customer systems, data, and environments are protected throughout testing activities</li> <li>Maintain strict confidentiality of customer information and testing results</li> <li>Adhere to applicable regulatory, contractual, and legal requirements governing penetration testing engagements</li> <li>Support compliance with NCSC Jordan licensing requirements and operational standards</li> </ul> <p><strong>Technical research & continuous improvement</strong></p> <ul> <li>Stay current on emerging threats, attack techniques, vulnerability trends, security research, offensive security tools and methodologies</li> <li>Contribute to the enhancement of penetration testing methodologies, tools, and processes</li> <li>Participate in internal knowledge-sharing initiatives and technical training programs</li> <li>Support continuous improvement activities within the cybersecurity advisory services practice</li> </ul> <p><strong>Cross-functional collaboration</strong></p> <ul> <li>Collaborate with penetration testing team leaders, cybersecurity consultants, security architects, managed security services teams</li> <li>Support remediation discussions and knowledge transfer activities where required</li> <li>Contribute technical expertise during customer engagements and security assessments</li> </ul> <h4>Our culture & code of conduct</h4> <p>At ZainTECH, we take pride in a culture built on collaboration, innovation, and uncompromising integrity. We are looking for individuals who share these values and are committed to customer-centricity and ethical excellence. All employees are expected to uphold our code of conduct, which serves as a guiding framework for responsible behavior across everything we do — from how we work with each other to how we engage with clients and partners globally.</p> <h4>Requirements</h4> <ul> <li>Bachelor's degree or intermediate diploma from a recognized university or academic institution</li> <li>Minimum 3 years of practical cybersecurity experience</li> <li>Demonstrated participation in at least two completed penetration testing projects</li> <li>Possession of at least one valid NCSC-approved penetration testing certification, including: Certified Ethical Hacker (CEH), CREST Registered Penetration Tester (CRT), Offensive Security Wireless Professional (OSWP), Offensive Security Certified Professional (OSCP), CompTIA PenTest+, or another NCSC-approved equivalent certification</li> <li>Hands-on offensive skills across network, web, and application testing, with command of common tooling (Burp Suite, Nmap, Metasploit) and scripting</li> </ul></p><p></p>

<p><h4>Description</h4> <p>The penetration tester is responsible for conducting authorized security assessments across enterprise, government, and critical infrastructure environments to identify, validate, and report security vulnerabilities. As part of ZainTECH's cybersecurity practice, the role supports the delivery of penetration testing engagements across infrastructure, web, wireless, and applications.</p> <p>The penetration tester performs hands-on offensive security testing, validates exploitability of identified vulnerabilities, and delivers clear, actionable remediation guidance to customers. The role works closely with cybersecurity consultants, advisory teams, and customer stakeholders to help strengthen security posture and reduce organizational risk across the MENA region.</p> <h4>Responsibilities</h4> <p><strong>Penetration testing & security assessments</strong></p> <ul> <li>Conduct penetration testing engagements across: external and internal networks, web applications, APIs and web services, wireless environments, infrastructure and supporting systems</li> <li>Execute testing activities in accordance with approved methodologies, industry standards, and customer-defined rules of engagement</li> <li>Identify, validate, and safely demonstrate security vulnerabilities and attack paths</li> <li>Assess exploitability, business impact, and risk exposure associated with identified findings</li> <li>Perform security validation and retesting activities following remediation efforts</li> </ul> <p><strong>Vulnerability analysis & reporting</strong></p> <ul> <li>Analyze identified vulnerabilities and security weaknesses to determine potential business impact</li> <li>Develop detailed technical findings and remediation recommendations</li> <li>Produce high-quality penetration testing reports that clearly communicate: vulnerability details, risk ratings, attack scenarios, business impact, remediation guidance</li> <li>Ensure findings are reproducible, technically accurate, and aligned with industry best practices</li> </ul> <p><strong>Testing governance & compliance</strong></p> <ul> <li>Conduct all testing activities within approved scope and rules of engagement</li> <li>Ensure customer systems, data, and environments are protected throughout testing activities</li> <li>Maintain strict confidentiality of customer information and testing results</li> <li>Adhere to applicable regulatory, contractual, and legal requirements governing penetration testing engagements</li> <li>Support compliance with NCSC Jordan licensing requirements and operational standards</li> </ul> <p><strong>Technical research & continuous improvement</strong></p> <ul> <li>Stay current on emerging threats, attack techniques, vulnerability trends, security research, offensive security tools and methodologies</li> <li>Contribute to the enhancement of penetration testing methodologies, tools, and processes</li> <li>Participate in internal knowledge-sharing initiatives and technical training programs</li> <li>Support continuous improvement activities within the cybersecurity advisory services practice</li> </ul> <p><strong>Cross-functional collaboration</strong></p> <ul> <li>Collaborate with penetration testing team leaders, cybersecurity consultants, security architects, managed security services teams</li> <li>Support remediation discussions and knowledge transfer activities where required</li> <li>Contribute technical expertise during customer engagements and security assessments</li> </ul> <h4>Our culture & code of conduct</h4> <p>At ZainTECH, we take pride in a culture built on collaboration, innovation, and uncompromising integrity. We are looking for individuals who share these values and are committed to customer-centricity and ethical excellence. All employees are expected to uphold our code of conduct, which serves as a guiding framework for responsible behavior across everything we do — from how we work with each other to how we engage with clients and partners globally.</p> <h4>Requirements</h4> <ul> <li>Bachelor's degree or intermediate diploma from a recognized university or academic institution</li> <li>Minimum 3 years of practical cybersecurity experience</li> <li>Demonstrated participation in at least two completed penetration testing projects</li> <li>Possession of at least one valid NCSC-approved penetration testing certification, including: Certified Ethical Hacker (CEH), CREST Registered Penetration Tester (CRT), Offensive Security Wireless Professional (OSWP), Offensive Security Certified Professional (OSCP), CompTIA PenTest+, or another NCSC-approved equivalent certification</li> <li>Hands-on offensive skills across network, web, and application testing, with command of common tooling (Burp Suite, Nmap, Metasploit) and scripting</li> </ul></p><p></p>

<section><p class="heading jdMain">Job Description</p><p class="heading">Roles &amp; Responsibilities</p><div class="paragraph"><p>The Account Manager is accountable for the promotion of the company products/services, through a well-defined strategy and sound partnerships with existing/potential partners. S/He works towards optimizing sales volumes and champions marketing programs. Main Duties and Responsibilities • Define and implement the strategy and roadmap of the assigned products/services line in alignment with the management team • Lead the partners relations in alignment with the company s management and strategy • Develop and maintain relationships with new and existing channels/clients to expand sales in the assigned territory • Build and maintain a solid channel/customer database, analyze data and develop metrics evaluating loyalty and new opportunities • Specify market requirements for current and future products/services by conducting market research supported by on-going visits to existing and potential customers • Execute and supervise the entire sales cycle from quotation to collection • Track credit and/or payment performance, review outstanding settlements and manage resolutions accordingly • Generate sales for the entire product/service line in terms of long-term revenue and profitability • Develop and deliver accurate sales forecasts and market development reports in line with business objectives • Oversee the implementation of targeted programs and marketing activities, monitor progress and raise recommendations as and when necessary • Promote the company and its services within the Region.</p></div></section><section><p class="heading">Desired Candidate Profile</p><p class="paragraph"></p><p><strong>Position Requirements</strong> Education Bachelor s degree in Business Administration, Sales or any other related field. Experience 5 to 7 years of relevant experience in selling IT solutions and services within cyber security, network solutions and hardware infrastructure domain.</p><p></p></section>

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> <span>Job Title <br>Account Manager<br><br>Job Scope <br></span><p>The Account Manager is accountable for the promotion of the company products/services, through a well-defined strategy and sound partnerships with existing/potential partners. S/He works towards optimizing sales volumes and champions marketing programs.</p><br> <br><br>Main Duties and Responsibilities <br><ul> <li>Define and implement the strategy and roadmap of the assigned products/services line in alignment with the management team</li> <li>Lead the partners’ relations in alignment with the company’s management and strategy</li> <li>Develop and maintain relationships with new and existing channels/clients to expand sales in the assigned territory</li> <li>Build and maintain a solid channel/customer database, analyze data and develop metrics evaluating loyalty and new opportunities</li> <li>Specify market requirements for current and future products/services by conducting market research supported by on-going visits to existing and potential customers</li> <li>Execute and supervise the entire sales cycle from quotation to collection</li> <li>Track credit and/or payment performance, review outstanding settlements and manage resolutions accordingly</li> <li>Generate sales for the entire product/service line in terms of long-term revenue and profitability</li> <li>Develop and deliver accurate sales forecasts and market development reports in line with business objectives</li> <li>Oversee the implementation of targeted programs and marketing activities, monitor progress and raise recommendations as and when necessary</li> <li>Promote the company and its services within the Region.</li> </ul> <br><br>Position Requirements <br><br>Education <br><p>Bachelor’s degree in Business Administration, Sales or any other related field.</p><br><br><br>Experience <br><p>5 to 7 years of relevant experience in selling IT solutions and services within cyber security, network solutions and hardware infrastructure domain.&nbsp;</p><br><br><br><br> </div>

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> <span>We are seeking an experienced Incident Response Lead to manage and coordinate cybersecurity incident response activities.<br> The ideal candidate will have hands-on experience in Digital Forensics and Incident Response (DFIR) , investigating security incidents, conducting root cause analysis, and leading containment, eradication, and recovery efforts in enterprise environments.<br> Key Responsibilities Lead the investigation and response to cybersecurity incidents.<br> Perform incident triage, analysis, containment, eradication, and recovery.<br> Conduct digital forensic investigations and root cause analysis.<br> Coordinate with SOC, Security Engineering, IT, and business teams during security incidents.<br> Develop and maintain incident response playbooks and procedures.<br> Analyze malware, phishing attacks, ransomware, and other cyber threats.<br> Prepare incident reports and provide recommendations to prevent future incidents.<br> Support threat hunting and continuous improvement of incident response capabilities.<br> Ensure compliance with organizational security policies and industry best practices.<br> 5–7 years of experience in Cybersecurity.<br> Hands-on experience in Incident Response and Digital Forensics (DFIR) .<br> Experience investigating security incidents in an enterprise environment.<br> Knowledge of malware analysis, ransomware, phishing, and threat detection.<br> Experience with SIEM, EDR, and security monitoring tools.<br> Strong understanding of Windows, Linux, networking, and security fundamentals.<br> Excellent analytical, troubleshooting, and communication skills.<br> Nice to Have Certifications such as GCFA, GCIH, GCFE, CHFI, CEH, CySA+, or Security+ .<br> Experience with cloud security incident response (Azure, AWS, or GCP).<br> Scripting experience (PowerShell or Python).<br></span> </div>

<section><p class="heading jdMain">Job Description</p><p class="heading">Roles &amp; Responsibilities</p><div class="paragraph"><p>The Incident Response Analyst is responsible for investigating, containing, eradicating, and supporting the recovery of cybersecurity incidents across customer and enterprise environments. The role plays a critical part in minimizing business impact from cyber threats by coordinating response activities, performing technical investigations, and supporting the continuous improvement of incident response capabilities. The role collaborates closely with Security Operations, Threat Intelligence, Digital Forensics, and customer IT teams to identify attack vectors, contain threats, and strengthen organizational resilience against future incidents. Responsibilities: Incident Investigation &amp; Response Respond to security incidents within defined SLAs and escalation procedures. Perform detailed investigations to determine Nature of the attack, Scope of compromise, Impacted systems, Attack vectors and Potential business impact Analyze indicators of compromise (IOCs) and attacker activity. Identify containment, eradication, and recovery actions required to mitigate incidents. Coordinate incident response activities with internal and customer stakeholders. Threat Analysis &amp; Root Cause Investigation Conduct in-depth analysis of security incidents and suspicious activities. Identify vulnerabilities, attack techniques, and security gaps contributing to incidents. Perform root cause analysis to determine how incidents occurred and identify preventive controls. Analyze attacker tactics, techniques, and procedures (TTPs) using industry frameworks such as MITRE ATT&amp;CK. Incident Coordination &amp; Escalation Manage incident response activities across multiple technical teams. Escalate incidents requiring Digital Forensics support, Specialized technical expertise and Malware analysis Coordinate communication between technical teams, management, and customer stakeholders. Support crisis management activities during major incidents. Documentation &amp; Reporting Prepare detailed incident reports documenting Findings, Impact assessments, Root cause analysis and Remediation recommendations Maintain investigation records and evidence documentation. Support development of executive-level incident summaries and post-incident reviews. Process Improvement &amp; Readiness Support the development and enhancement of Incident response playbooks, Response procedures and Investigation methodologies Participate in tabletop exercises and incident simulations. Identify opportunities to improve response effectiveness and operational readiness.</p></div></section><section><p class="heading">Desired Candidate Profile</p><p class="paragraph"></p><p>Bachelor's degree or intermediate diploma (minimum) from a recognised institution. Minimum 3 years experience in cybersecurity / information security, including 1 or more years in incident response. At least one valid NCSC-approved IR certification like (ECIH, CCIM, Blue Team Level 2) or another equivalent certification in the same field that is approved by the NCSC. Practical skills in log analysis, endpoint and network investigation, malware triage, and use of IR tooling. Exposure to SIEM/SOAR and EDR platforms is preferable. Experience in an MSSP or SOC environment is preferable.</p><p></p></section>

<p><h4>Description</h4> <p>The incident response analyst is responsible for investigating, containing, eradicating, and supporting the recovery of cybersecurity incidents across customer and enterprise environments. The role plays a critical part in minimizing business impact from cyber threats by coordinating response activities, performing technical investigations, and supporting the continuous improvement of incident response capabilities.</p> <p>The role collaborates closely with security operations, threat intelligence, digital forensics, and customer IT teams to identify attack vectors, contain threats, and strengthen organizational resilience against future incidents.</p> <h4>Responsibilities</h4> <h4>Incident investigation & response</h4> <ul> <li>Respond to security incidents within defined SLAs and escalation procedures.</li> <li>Perform detailed investigations to determine nature of the attack, scope of compromise, impacted systems, attack vectors, and potential business impact.</li> <li>Analyze indicators of compromise (IOCs) and attacker activity.</li> <li>Identify containment, eradication, and recovery actions required to mitigate incidents.</li> <li>Coordinate incident response activities with internal and customer stakeholders.</li> </ul> <h4>Threat analysis & root cause investigation</h4> <ul> <li>Conduct in-depth analysis of security incidents and suspicious activities.</li> <li>Identify vulnerabilities, attack techniques, and security gaps contributing to incidents.</li> <li>Perform root cause analysis to determine how incidents occurred and identify preventive controls.</li> <li>Analyze attacker tactics, techniques, and procedures (TTPs) using industry frameworks such as MITRE ATT&CK.</li> </ul> <h4>Incident coordination & escalation</h4> <ul> <li>Manage incident response activities across multiple technical teams.</li> <li>Escalate incidents requiring digital forensics support, specialized technical expertise, and malware analysis.</li> <li>Coordinate communication between technical teams, management, and customer stakeholders.</li> <li>Support crisis management activities during major incidents.</li> </ul> <h4>Documentation & reporting</h4> <ul> <li>Prepare detailed incident reports documenting findings, impact assessments, root cause analysis, and remediation recommendations.</li> <li>Maintain investigation records and evidence documentation.</li> <li>Support development of executive-level incident summaries and post-incident reviews.</li> </ul> <h4>Process improvement & readiness</h4> <ul> <li>Support the development and enhancement of incident response playbooks, response procedures, and investigation methodologies.</li> <li>Participate in tabletop exercises and incident simulations.</li> <li>Identify opportunities to improve response effectiveness and operational readiness.</li> </ul> <h4>Our culture & code of conduct</h4> <p>At ZainTECH, we take pride in a culture built on collaboration, innovation, and uncompromising integrity. We are looking for individuals who share these values and are committed to customer-centricity and ethical excellence. All employees are expected to uphold our code of conduct, which serves as a guiding framework for responsible behaviour across everything we do - from how we work with each other to how we engage with clients and partners globally.</p> <h4>Requirements</h4> <ul> <li>Bachelor's degree or intermediate diploma (minimum) from a recognised institution.</li> <li>Minimum 3 years experience in cybersecurity / information security, including 1 or more years in incident response.</li> <li>At least one valid NCSC-approved IR certification like ECIH, CCIM, Blue Team Level 2, or another equivalent certification in the same field that is approved by the NCSC.</li> <li>Practical skills in log analysis, endpoint and network investigation, malware triage, and use of IR tooling.</li> <li>Exposure to SIEM/SOAR and EDR platforms is preferable.</li> <li>Experience in an MSSP or SOC environment is preferable.</li> </ul></p><p></p>

<p><h4>Description</h4> <p>The SOC analyst - tier 1 is responsible for providing 24x7 security monitoring, alert triage, event analysis, and incident escalation services within ZainTECH’s managed security operations center (SOC). As the first line of defense against cybersecurity threats, the role continuously monitors customer environments, validates security events, and ensures potential security incidents are identified, classified, documented, and escalated in accordance with established procedures and service level agreements.</p> <h4>Responsibilities:</h4> <p><strong>Security monitoring & event analysis</strong></p> <ul> <li>Provide continuous 24x7 monitoring of customer and enterprise security environments through shift-based operations.</li> <li>Monitor and analyze security events generated from SIEM platforms, IDS/IPS solutions, endpoint detection & response (EDR) tools, firewalls, email security gateways, web security solutions, and cloud security platforms.</li> <li>Review and assess security alerts to determine whether activity represents a legitimate security threat or a false positive.</li> <li>Perform initial event validation, classification, and prioritization based on severity, risk, and potential business impact.</li> <li>Identify suspicious behavior, indicators of compromise (IOCs), and anomalous activities requiring further investigation.</li> </ul> <p><strong>Incident triage & escalation</strong></p> <ul> <li>Perform first-level analysis and triage of security alerts and events.</li> <li>Create and manage incident tickets within approved incident management platforms.</li> <li>Categorize incidents based on severity, impact, urgency, and threat classification.</li> <li>Escalate validated incidents to SOC analyst - tier 2 teams in accordance with approved escalation procedures.</li> <li>Ensure escalations include complete and accurate investigation details to support efficient handover and further analysis.</li> <li>Maintain incident tracking and ensure timely updates throughout the incident lifecycle.</li> </ul> <p><strong>SIEM operations & security monitoring</strong></p> <ul> <li>Utilize SIEM platforms to monitor security events, review alerts, execute predefined searches and queries, support basic investigations.</li> <li>Support operational activities including alert validation, monitoring dashboard review, log analysis, and security event correlation.</li> <li>Assist with identifying false positives and escalating tuning recommendations where required.</li> <li>Support the overall effectiveness and reliability of monitoring operations.</li> </ul> <p><strong>Documentation & reporting</strong></p> <ul> <li>Maintain accurate records of investigations, observations, and escalation activities.</li> <li>Document security incidents and monitoring activities in accordance with operational procedures.</li> <li>Participate in shift handovers and ensure continuity of investigations between teams.</li> <li>Support operational reporting and SOC performance metrics activities.</li> </ul> <p><strong>Governance, compliance & operational excellence</strong></p> <ul> <li>Follow approved SOC procedures, playbooks, and operational standards.</li> <li>Ensure compliance with internal security policies, customer contractual obligations, and NCSC Jordan licensing requirements.</li> <li>Handle customer information with strict confidentiality and professionalism.</li> <li>Participate in training, simulation exercises, and continuous improvement initiatives.</li> <li>Maintain awareness of emerging cybersecurity threats and attack techniques.</li> </ul> <h4>Our culture & code of conduct:</h4> <p>At ZainTECH, we take pride in a culture built on collaboration, innovation, and uncompromising integrity. We are looking for individuals who share these values and are committed to customer-centricity and ethical excellence. All employees are expected to uphold our code of conduct, which serves as a guiding framework for responsible behavior across everything we do — from how we work with each other to how we engage with clients and partners globally.</p> <h4>Requirements</h4> <ul> <li>Bachelor's degree or intermediate diploma from a recognised institution.</li> <li>At least 6 months of practical cybersecurity experience.</li> <li>At least one valid NCSC-approved SOC certification like CSA, GSOC, GCIA, CTIA, Blue Team Level 1, or Cisco CyberOps Associate, or another internationally recognised, equivalent certification in the same field that is approved by the NCSC.</li> <li>Familiarity with SIEM consoles, alert triage, and SOC monitoring workflow; willingness to work rotating shifts.</li> <li>Foundational networking and operating-system knowledge is preferable.</li> <li>Prior internship or junior SOC experience is preferable.</li> </ul></p><p></p>

<p><h4>Description</h4> <p>The Specialist Network Engineer - Cisco Security is responsible for designing, implementing, and supporting enterprise network security solutions with a primary focus on Cisco Identity Services Engine (ISE) and Cisco Firepower technologies (FTD & FMC). The role involves managing network access control (NAC), authentication services, firewall policies, VPN solutions, and advanced threat protection to ensure secure and reliable enterprise infrastructure operations. The engineer works closely with network, infrastructure, and security teams to deploy and optimize security controls across wired, wireless, and remote access environments. Key responsibilities include configuring Cisco ISE for authentication, authorization, posture assessment, and device profiling, as well as administering Cisco Firepower firewalls, IPS, AMP, and URL filtering features.</p> <p>The role also includes monitoring security infrastructure, troubleshooting complex network security issues, performing system upgrades, and responding to security incidents. Additionally, the engineer is responsible for maintaining security documentation, enforcing organizational security standards, and contributing to continuous improvement initiatives to strengthen the company’s overall security posture. The ideal candidate should possess strong hands-on experience with Cisco security technologies, enterprise networking concepts, and security best practices.</p> <h4>Responsibilities</h4> <ul> <li><strong>Cisco ISE (Identity Services Engine) Administration</strong> <ul> <li>Design, deploy, and maintain Cisco ISE solutions for Network Access Control (NAC)</li> <li>Configure and manage AAA services using: <ul> <li>802.1X</li> <li>MAB</li> <li>TACACS+</li> </ul> </li> <li>Manage and support: <ul> <li>Guest access portals</li> <li>BYOD onboarding</li> <li>Posture assessment policies</li> </ul> </li> <li>Integrate Cisco ISE with Active Directory and identity management systems</li> <li>Troubleshoot authentication and authorization issues across wired and wireless environments</li> <li>Define and enforce access control policies based on user roles, device profiling, and security posture</li> </ul> </li> <li><strong>Cisco Firepower (FTD & FMC) Management</strong> <ul> <li>Manage Cisco Firepower (FTD & FMC) environments</li> <li>Firewall policies</li> <li>Site-to-site and remote access VPNs</li> <li>Monitor security features like IPS, AMP, URL filtering</li> <li>Perform upgrades, patching, and security monitoring</li> </ul> </li> <li><strong>Security Operations</strong> <ul> <li>Monitor and troubleshoot network security issues</li> <li>Support incident response and root cause analysis</li> <li>Ensure infrastructure availability and compliance</li> </ul> </li> <li><strong>Documentation & Continuous Improvement</strong> <ul> <li>Maintain documentation of security configurations, policies, and operational procedures</li> <li>Contribute to the development of network security standards and best practices</li> <li>Identify opportunities to improve security posture, operational efficiency, and infrastructure resilience</li> </ul> </li> </ul> <h4>Requirements</h4> <ul> <li>Bachelor’s degree in Computer Science, Information Technology, or related field, or equivalent experience</li> <li>3–5+ years of experience in network security or security engineering roles</li> <li>Hands-on experience with Cisco ISE and Cisco Firepower (FTD & FMC) technologies</li> <li>Experience supporting enterprise-scale network security environments and NAC solutions</li> <li>Strong understanding of TCP/IP networking, VLANs, routing, switching, and security architectures</li> <li>Experience with VPN technologies, firewall policy management, and security monitoring/log analysis</li> <li>Knowledge of enterprise security best practices, access control frameworks, and incident troubleshooting</li> </ul></p><p></p>

<p><h4>Description</h4> <p>The Specialist Network Engineer - Cisco Security is responsible for designing, implementing, and supporting enterprise network security solutions with a primary focus on Cisco Identity Services Engine (ISE) and Cisco Firepower technologies (FTD & FMC). The role involves managing network access control (NAC), authentication services, firewall policies, VPN solutions, and advanced threat protection to ensure secure and reliable enterprise infrastructure operations. The engineer works closely with network, infrastructure, and security teams to deploy and optimize security controls across wired, wireless, and remote access environments. Key responsibilities include configuring Cisco ISE for authentication, authorization, posture assessment, and device profiling, as well as administering Cisco Firepower firewalls, IPS, AMP, and URL filtering features.</p> <p>The role also includes monitoring security infrastructure, troubleshooting complex network security issues, performing system upgrades, and responding to security incidents. Additionally, the engineer is responsible for maintaining security documentation, enforcing organizational security standards, and contributing to continuous improvement initiatives to strengthen the company’s overall security posture. The ideal candidate should possess strong hands-on experience with Cisco security technologies, enterprise networking concepts, and security best practices.</p> <h4>Responsibilities</h4> <ul> <li><strong>Cisco ISE (Identity Services Engine) Administration</strong> <ul> <li>Design, deploy, and maintain Cisco ISE solutions for Network Access Control (NAC)</li> <li>Configure and manage AAA services using: <ul> <li>802.1X</li> <li>MAB</li> <li>TACACS+</li> </ul> </li> <li>Manage and support: <ul> <li>Guest access portals</li> <li>BYOD onboarding</li> <li>Posture assessment policies</li> </ul> </li> <li>Integrate Cisco ISE with Active Directory and identity management systems</li> <li>Troubleshoot authentication and authorization issues across wired and wireless environments</li> <li>Define and enforce access control policies based on user roles, device profiling, and security posture</li> </ul> </li> <li><strong>Cisco Firepower (FTD & FMC) Management</strong> <ul> <li>Manage Cisco Firepower (FTD & FMC) environments</li> <li>Firewall policies</li> <li>Site-to-site and remote access VPNs</li> <li>Monitor security features like IPS, AMP, URL filtering</li> <li>Perform upgrades, patching, and security monitoring</li> </ul> </li> <li><strong>Security Operations</strong> <ul> <li>Monitor and troubleshoot network security issues</li> <li>Support incident response and root cause analysis</li> <li>Ensure infrastructure availability and compliance</li> </ul> </li> <li><strong>Documentation & Continuous Improvement</strong> <ul> <li>Maintain documentation of security configurations, policies, and operational procedures</li> <li>Contribute to the development of network security standards and best practices</li> <li>Identify opportunities to improve security posture, operational efficiency, and infrastructure resilience</li> </ul> </li> </ul> <h4>Requirements</h4> <ul> <li>Bachelor’s degree in Computer Science, Information Technology, or related field, or equivalent experience</li> <li>3–5+ years of experience in network security or security engineering roles</li> <li>Hands-on experience with Cisco ISE and Cisco Firepower (FTD & FMC) technologies</li> <li>Experience supporting enterprise-scale network security environments and NAC solutions</li> <li>Strong understanding of TCP/IP networking, VLANs, routing, switching, and security architectures</li> <li>Experience with VPN technologies, firewall policy management, and security monitoring/log analysis</li> <li>Knowledge of enterprise security best practices, access control frameworks, and incident troubleshooting</li> </ul></p><p></p>

<p><h4>Description</h4> <p>The Network Engineer - Cisco Security is responsible for designing, implementing, and supporting enterprise network security solutions with a primary focus on Cisco Identity Services Engine (ISE) and Cisco Firepower technologies (FTD & FMC). The role involves managing network access control (NAC), authentication services, firewall policies, VPN solutions, and advanced threat protection to ensure secure and reliable enterprise infrastructure operations. The engineer works closely with network, infrastructure, and security teams to deploy and optimize security controls across wired, wireless, and remote access environments. Key responsibilities include configuring Cisco ISE for authentication, authorization, posture assessment, and device profiling, as well as administering Cisco Firepower firewalls, IPS, AMP, and URL filtering features.</p> <p>The role also includes monitoring security infrastructure, troubleshooting complex network security issues, performing system upgrades, and responding to security incidents. Additionally, the engineer is responsible for maintaining security documentation, enforcing organizational security standards, and contributing to continuous improvement initiatives to strengthen the company’s overall security posture. The ideal candidate should possess strong hands-on experience with Cisco security technologies, enterprise networking concepts, and security best practices.</p> <h4>Responsibilities:</h4> <ul> <li><strong>Cisco ISE (Identity Services Engine) Administration</strong></li> <li>Design, deploy, and maintain Cisco ISE solutions for Network Access Control (NAC)</li> <li>Configure and manage AAA services using: <ul> <li>802.1X</li> <li>MAB</li> <li>TACACS+</li> </ul> </li> <li>Manage and support: <ul> <li>Guest access portals</li> <li>BYOD onboarding</li> <li>Posture assessment policies</li> </ul> </li> <li>Integrate Cisco ISE with Active Directory and identity management systems</li> <li>Troubleshoot authentication and authorization issues across wired and wireless environments</li> <li>Define and enforce access control policies based on user roles, device profiling, and security posture</li> <li><strong>Cisco Firepower (FTD & FMC) Management</strong></li> <li>Manage Cisco Firepower (FTD & FMC) environments</li> <li>Firewall policies</li> <li>Site-to-site & remote access VPNs</li> <li>Monitor security features like IPS, AMP, URL filtering</li> <li>Perform upgrades, patching, and security monitoring</li> <li><strong>Security Operations</strong></li> <li>Monitor and troubleshoot network security issues</li> <li>Support incident response and root cause analysis</li> <li>Ensure infrastructure availability and compliance</li> <li><strong>Documentation & Continuous Improvement</strong></li> <li>Maintain documentation of security configurations, policies, and operational procedures</li> <li>Contribute to the development of network security standards and best practices</li> <li>Identify opportunities to improve security posture, operational efficiency, and infrastructure resilience</li> </ul> <h4>Requirements</h4> <ul> <li>Bachelor’s degree in Computer Science, Information Technology, or related field, or equivalent experience</li> <li>3–5+ years of experience in network security or security engineering roles</li> <li>Hands-on experience with Cisco ISE and Cisco Firepower (FTD & FMC) technologies</li> <li>Experience supporting enterprise-scale network security environments and NAC solutions</li> <li>Strong understanding of TCP/IP networking, VLANs, routing, switching, and security architectures</li> <li>Experience with VPN technologies, firewall policy management, and security monitoring/log analysis</li> <li>Knowledge of enterprise security best practices, access control frameworks, and incident troubleshooting</li> </ul></p><p></p>

<p><h4>Description</h4> <p>The Network Engineer - Cisco Security is responsible for designing, implementing, and supporting enterprise network security solutions with a primary focus on Cisco Identity Services Engine (ISE) and Cisco Firepower technologies (FTD & FMC). The role involves managing network access control (NAC), authentication services, firewall policies, VPN solutions, and advanced threat protection to ensure secure and reliable enterprise infrastructure operations. The engineer works closely with network, infrastructure, and security teams to deploy and optimize security controls across wired, wireless, and remote access environments. Key responsibilities include configuring Cisco ISE for authentication, authorization, posture assessment, and device profiling, as well as administering Cisco Firepower firewalls, IPS, AMP, and URL filtering features.</p> <p>The role also includes monitoring security infrastructure, troubleshooting complex network security issues, performing system upgrades, and responding to security incidents. Additionally, the engineer is responsible for maintaining security documentation, enforcing organizational security standards, and contributing to continuous improvement initiatives to strengthen the company’s overall security posture. The ideal candidate should possess strong hands-on experience with Cisco security technologies, enterprise networking concepts, and security best practices.</p> <h4>Responsibilities:</h4> <ul> <li><strong>Cisco ISE (Identity Services Engine) Administration</strong></li> <li>Design, deploy, and maintain Cisco ISE solutions for Network Access Control (NAC)</li> <li>Configure and manage AAA services using: <ul> <li>802.1X</li> <li>MAB</li> <li>TACACS+</li> </ul> </li> <li>Manage and support: <ul> <li>Guest access portals</li> <li>BYOD onboarding</li> <li>Posture assessment policies</li> </ul> </li> <li>Integrate Cisco ISE with Active Directory and identity management systems</li> <li>Troubleshoot authentication and authorization issues across wired and wireless environments</li> <li>Define and enforce access control policies based on user roles, device profiling, and security posture</li> <li><strong>Cisco Firepower (FTD & FMC) Management</strong></li> <li>Manage Cisco Firepower (FTD & FMC) environments</li> <li>Firewall policies</li> <li>Site-to-site & remote access VPNs</li> <li>Monitor security features like IPS, AMP, URL filtering</li> <li>Perform upgrades, patching, and security monitoring</li> <li><strong>Security Operations</strong></li> <li>Monitor and troubleshoot network security issues</li> <li>Support incident response and root cause analysis</li> <li>Ensure infrastructure availability and compliance</li> <li><strong>Documentation & Continuous Improvement</strong></li> <li>Maintain documentation of security configurations, policies, and operational procedures</li> <li>Contribute to the development of network security standards and best practices</li> <li>Identify opportunities to improve security posture, operational efficiency, and infrastructure resilience</li> </ul> <h4>Requirements</h4> <ul> <li>Bachelor’s degree in Computer Science, Information Technology, or related field, or equivalent experience</li> <li>3–5+ years of experience in network security or security engineering roles</li> <li>Hands-on experience with Cisco ISE and Cisco Firepower (FTD & FMC) technologies</li> <li>Experience supporting enterprise-scale network security environments and NAC solutions</li> <li>Strong understanding of TCP/IP networking, VLANs, routing, switching, and security architectures</li> <li>Experience with VPN technologies, firewall policy management, and security monitoring/log analysis</li> <li>Knowledge of enterprise security best practices, access control frameworks, and incident troubleshooting</li> </ul></p><p></p>

<p><h4>Description</h4> <p>The digital forensics analyst is responsible for conducting forensic investigations, evidence acquisition, preservation, analysis, and reporting activities in support of cybersecurity incidents, legal investigations, regulatory requirements, and internal security matters. The role plays a critical part in identifying the source, scope, and impact of cyber incidents while ensuring the integrity and admissibility of digital evidence.</p> <p>The role works closely with incident response teams, security operations, legal stakeholders, and customer representatives to investigate cyber incidents, collect forensic evidence, and provide technical findings that support decision-making, remediation, and potential legal proceedings.</p> <h4>Responsibilities</h4> <p><strong>Digital evidence acquisition & preservation</strong><br> Perform forensic acquisition of digital evidence from workstations, servers, mobile devices, virtual environments, cloud platforms, and removable media.<br> Ensure proper chain of custody procedures are followed throughout investigations.<br> Preserve evidence integrity using approved forensic methodologies and tools.<br> Conduct live and dead-box forensic acquisitions.<br> Maintain forensic evidence repositories and documentation.</p> <p><strong>Forensic investigation & analysis</strong><br> Analyze digital evidence to identify unauthorized access, data theft, insider threats, malware activity, data destruction attempts, and policy violations.<br> Examine file systems, registry artifacts, event logs, browser artifacts, user activity records, and network evidence.<br> Conduct timeline analysis and event reconstruction activities.<br> Support attribution efforts and attack path analysis where applicable.</p> <p><strong>Reporting & documentation</strong><br> Prepare detailed forensic reports documenting the methodology, findings, evidence collected, and conclusions.<br> Present findings to technical and non-technical stakeholders.<br> Maintain investigation records in accordance with regulatory and legal requirements.<br> Support expert witness preparation activities where required.</p> <p><strong>Research & continuous improvement</strong><br> Maintain awareness of emerging attack techniques, anti-forensics methodologies, and digital investigation trends.<br> Support the development of investigation procedures, forensic methodologies, and evidence handling standards.<br> Participate in technical training and capability development initiatives.</p> <h4>Our culture & code of conduct</h4> <p>At ZainTECH, we take pride in a culture built on collaboration, innovation, and uncompromising integrity. We are looking for individuals who share these values and are committed to customer-centricity and ethical excellence. All employees are expected to uphold our code of conduct, which serves as a guiding framework for responsible behavior across everything we do—from how we work with each other to how we engage with clients and partners globally.</p> <h4>Requirements</h4> <ul> <li>Bachelor's degree or intermediate diploma (minimum) from a recognised institution.</li> <li>Minimum 2 years experience in cybersecurity, including at least 2 completed digital forensic investigations.</li> <li>At least one valid NCSC-approved forensics certification like GCFE, GCFA, CHFI, or another equivalent certification in the same field that is approved by the NCSC.</li> <li>Hands-on use of forensic tools and sound evidence-handling practice.</li> <li>Exposure to mobile and cloud forensics is preferable.</li> <li>Experience in an MSSP, lab, or law-enforcement forensic environment is preferable.</li> </ul></p><p></p>

<p><h4>Description</h4> <p>The penetration testing team leader is responsible for leading ZainTECH’s licensed penetration testing capability within the cybersecurity advisory services practice. The role oversees the delivery of offensive security engagements across enterprise, government, and critical infrastructure customers throughout the MENA region, ensuring all testing activities are performed in accordance with industry best practices, recognized testing methodologies, and NCSC Jordan licensing requirements. The role combines hands-on technical leadership with team management, customer engagement, and service governance responsibilities.</p> <p>Also responsible for managing penetration testing engagements, developing offensive security capabilities, assuring quality of deliverables, and strengthening customer security postures through actionable remediation guidance.</p> <h4>Responsibilities</h4> <p><strong>Penetration testing engagement leadership</strong><br> Lead and manage penetration testing engagements across infrastructure, web, wireless, and applications to a recognized methodology.<br> Define engagement scope, objectives, testing methodology, and rules of engagement.<br> Ensure all testing activities are conducted safely and within approved customer authorizations.<br> Manage engagement timelines, resources, and delivery quality.<br> Act as the primary technical lead throughout the penetration testing lifecycle.</p> <p><strong>Offensive security delivery</strong><br> Perform advanced penetration testing activities using both manual and automated testing techniques.<br> Identify, validate, and demonstrate security vulnerabilities and attack paths.<br> Assess exploitability, business impact, and risk exposure associated with identified findings.<br> Conduct vulnerability assessments, penetration testing, security validation exercises, configuration reviews, and red team-style activities where applicable.<br> Support retesting activities following remediation efforts.</p> <p><strong>Quality assurance & technical review</strong><br> Review and validate penetration testing findings prior to customer delivery.<br> Ensure reports are technically accurate, risk-rated appropriately, actionable and business-focused, and aligned with industry standards.<br> Review attack chains and exploitation methodologies to ensure consistency and quality.<br> Maintain testing methodologies aligned with OWASP Testing Guide, PTES, OSSTMM, NIST guidance, and industry best practices.</p> <p><strong>Customer engagement & advisory services</strong><br> Present technical findings and executive summaries to customer stakeholders.<br> Conduct remediation workshops and technical review sessions.<br> Support customers in understanding security risks, threat exposure, and recommended remediation activities.<br> Provide strategic guidance on improving overall security posture.<br> Support presales activities, customer workshops, and cybersecurity assessments where required.</p> <p><strong>Team leadership & capability development</strong><br> Lead, mentor, and develop penetration testers within the cybersecurity practice.<br> Conduct technical coaching, skills development programs, knowledge-sharing sessions, and offensive security training initiatives.<br> Support recruitment, onboarding, and capability development activities.<br> Ensure team certifications remain current and aligned with NCSC requirements.<br> Drive continuous improvement across offensive security methodologies and tooling.</p> <p><strong>Governance, compliance & service development</strong><br> Ensure compliance with NCSC Jordan licensing requirements, internal security policies, customer contractual obligations, and regulatory requirements.<br> Enforce secure testing practices, confidentiality requirements, and evidence handling procedures.<br> Support service development initiatives to expand ZainTECH’s offensive security capabilities.<br> Maintain operational documentation, testing standards, and quality assurance processes.<br> Coordinate reporting and compliance activities required by NCSC and other regulatory stakeholders.</p> <h4>Our culture & code of conduct</h4> <p>At ZainTECH, we take pride in a culture built on collaboration, innovation, and uncompromising integrity. We are looking for individuals who share these values and are committed to customer-centricity and ethical excellence. All employees are expected to uphold our code of conduct, which serves as a guiding framework for responsible behavior across everything we do — from how we work with each other to how we engage with clients and partners globally.</p> <h4>Requirements</h4> <ul> <li>Bachelor's degree (minimum) in information technology or a related field.</li> <li>Minimum 5 years experience in cybersecurity, including at least 5 completed penetration testing projects.</li> <li>At least one valid NCSC-approved penetration testing certification like CPENT, CEPT, OSCE, LPT, CPT, GPEN, or another internationally recognized, equivalent certification in the same field that is approved by the NCSC.</li> <li>Deep, hands-on offensive skills across network, web, wireless, and application testing, and command of recognized methodologies (OWASP, PTES, OSSTMM).</li> <li>Leadership: proven ability to lead a testing team and present to client executives.</li> <li>Advanced degree in cybersecurity or a related discipline is preferable.</li> <li>Advanced credentials such as OSCE, CPENT, LPT, or GPEN are preferable.</li> <li>Experience in red teaming or an MSSP/consultancy offensive practice is preferable.</li> </ul></p><p></p>

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> <p><strong>A platform you can believe in: Immersive One is the leading cyber resilience solution across the globe.</strong></p><br><p><strong>Showcase the value of the Immersive One platform and secure the technical win alongside a team of the brightest minds in cybersecurity. At Immersive, we’re uniquely positioned to future-proof organizations against any cyber challenge. If that excites you, read on!!</strong></p><br><p>Immersive is the cyber proving ground for the AI enterprise. Through Immersive One, organizations can test whether people, AI-enabled workflows, cyber security teams, agents, and leaders can perform securely under realistic pressure, then turn that performance into evidence they can use to improve, benchmark, and report readiness.</p><br><p>Trusted by 30%+ of the Fortune 100 and ranked #1 in the Forrester Wave™ 2026, Immersive helps organizations prove AI can be adopted safely, teams can develop and defend at AI speed, leaders can lead through crisis, and AI agents can be validated before they are trusted in live workflows</p><br><p><strong>https://www.immersivelabs.com/why-immersive-labs</strong></p><br><p>We help the world’s biggest brands like Citi, Pfizer, Humana, and HSBC, protect their revenues and brand reputations.</p><br><p><br>Immersive was founded in 2017, from a cargo container in Bristol, UK we’ve grown to over 300 employees globally, announced funding of more than $180 million and been voted a Best place to work on multiple occasions!</p><br><p><u>https://www.immersivelabs.com/company/our-story</u></p><br><p><em>“The speed at which Immersive Labs produces technical content is hugely impressive, and this turnaround has helped get our teams ahead of the curve, giving them hands-on experience with serious vulnerabilities, in a secure environment, as soon as they emerge.”</em></p><br><p>Head of Global Cybersecurity Operations, HSBC</p><br><p><br><strong>Solutions Consultant - Jordan <br></strong>We’re looking for an experienced cybersecurity professional with a number of years experience across the entire customer lifecycle - from pre-sales to post-sales and professional services - to join our growing Customer Experience team as a <strong>Solutions Consultant </strong>based in Jordan covering the METNA &amp; APAC region. </p><br><p>The <strong>Scale Team</strong> at Immersive is a high-velocity engine that serves a large volume of customers and prospects through a fast, repeatable, digitally-led motion. As a Solution Consultant on the Scale Team, you'll own technical pre-sales and the first two months of onboarding across many accounts, and deliver one-to-many enablement that gets customers to value quickly and supports their migration to the Immersive One Core platform.</p><br><p>This is a role for someone who's energised by breadth, pace, and impact at scale — who'd rather run a sharp, repeatable motion across many customers than immerse deeply in a single account. You'll work as part of the Scale Team alongside our Inside Sales Reps and Customer Operations, turning qualified opportunities into demos, trials, onboardings, and adoption — fast!</p><br><strong>What You'll Do</strong><strong>Pre-sales demos and trials</strong><ul><li><p>Deliver product demonstrations built on the qualification Sales has completed, tailored quickly to the prospect's use case</p><br></li><li><p>Rank solution fit (Green / Yellow / Red / NA) to steer where Sales invests their time</p><br></li><li><p>Set up and run in-platform free trials, with one or two coaching sessions to guide prospects through the key features — proving value live, without bespoke success plans or post-POV reports</p><br></li><li><p>Answer technical questions and flag obvious blockers early</p><br></li><li><p>Maintain strong working knowledge of the Immersive platform and competitor technologies</p><br></li></ul><strong>Onboard new customers (first 60 days)</strong><ul><li><p>Run kick-off sessions and deliver a contained onboarding within a strict two-month window across a small number of meetings</p><br></li><li><p>Provide light-touch integration guidance — point customers to documentation and standard connectors, and route deeper technical needs to Support</p><br></li><li><p>Run month-one and month-two check-in and coaching sessions, with the digital academy as the core enablement engine</p><br></li></ul><strong>Drive adoption and migration at scale</strong><ul><li><p>Deliver one-to-many activities — webinars, workshops, and Cyber Digital Bootcamps — to drive adoption and value across the customer base</p><br></li><li><p>Support the phased migration of Standard customers to Immersive One Core, contributing to repeatable enablement content and self-serve resources</p><br></li><li><p>Re-engage on expansion when a signal appears, running the same light demo / trial-coaching motion for the expansion scope</p><br></li></ul><strong>Across everything</strong><ul><li><p>Partner closely with Inside Sales Reps and Customer Operations to keep the motion efficient</p><br></li><li><p>Serve as the voice of the customer to our product, content, and engineering teams to influence innovation</p><br></li><li><p>Stay informed of evolving threats, AI, trends, and new technologies</p><br></li></ul><strong>Sounds good? We’d love to hear from you if you have proven experience in the following areas, but don’t worry if you don’t hit each one exactly, although experience working within cybersecurity is essential:</strong><ul><li><p>2+ years in sales engineering, solutions consulting, technical onboarding, or a technical customer-facing role — ideally in a SaaS or cybersecurity environment</p><br></li><li><p>Comfortable working at high volume and pace, running repeatable motions across many accounts and keeping engagements within tight time boxes</p><br></li><li><p>You're a confident presenter to both technical and non-technical audiences, including one-to-many formats such as webinars and bootcamps</p><br></li><li><p>Able to qualify and prioritise quickly, and to communicate technical concepts in a clear, jargon-free way</p><br></li><li><p>Proficiency in IT fundamentals (computer hardware/software, databases, networking, security, and software development)</p><br></li><li><p>Knowledge of information security concepts, domains, compliance, and standards</p><br></li></ul><ul><li><p>Experience delivering onboarding, enablement, or one-to-many sessions at scale</p><br></li><li><p>Familiarity with product-led growth (PLG) or digitally-led customer motions</p><br></li><li><p>Hands-on experience with Windows &amp; Linux operating systems, security tools (IDS, firewalls, anti-malware, SIEM), and public cloud environments would be useful but not essential</p><br><p><strong>Immersive’s growth has been fuelled by our values that underpin everything we do, here's how they relate to this role:</strong></p><br></li><li><p><strong>Driven</strong> - We push the boundaries of innovation, acting swiftly to achieve ambitious outcomes. Our drive embodies a culture of ambition, where challenges are stepping stones to excellence.</p><br></li><li><p><strong>Inclusive</strong> - Our strength lies in diversity, fostering a culture where every individual contributes to our collective strength. We champion open dialogue and empathy, ensuring a collaborative, inclusive workplace.</p><br></li><li><p><strong>Customer Centric</strong> - We seek to develop deep relationships with our customers to help them achieve their business outcomes. We exceed our customers and partners expectations by crafting products, services and experience that surprise, delight and ensuring they feel valued and supported every day.</p><br></li><li><p><strong>One Team - </strong>We are a talented global team working together to achieve our vision. Central to our ethos, resilience means adapting and thriving in adversity. It guides our innovation, ensuring we and our clients are prepared for the future.</p><br></li></ul><p>If you would like to read more about what you can expect from our recruitment process, you can visit our dedicated <u>interview process</u> page.</p><br><p><strong><br>As well as an inclusive, supportive place for you to be you. We offer an extensive range of benefits so you can do your very best work:</strong></p><br><ul><li><p>Time off, flexible and remote working so you can work when is best for you, includes 25 days annual leave + 2 volunteering days and birthday half day</p><br></li><li><p>Look after your family and yourself with enhanced parental leave, mindfulness groups, critical illness cover,</p><br></li><li><p>Career and learning development through the platform and our ‘Learn Anything’ fund</p><br></li><li><p>Share in the companies success with share options, sales incentives and Recognition &amp; Rewards for doing great work and living our values and behaviours</p><br></li><li><p>Informal or formal flexible working options, e.g. flexible start and finish times, reduced hours, job share, remote working</p><br></li><li><p>We’re a sociable, tight-knit team with monthly socials, and sports clubs. Our socials have included everything from pottery painting and paper mask making, to movie nights and escape rooms</p><br></li><li><p>While this is a remote position, we do all meet in our EMEA HQ on a bi annual basis and regularly in person in region.</p><br></li></ul><p>Find out more about life at Immersive <u>https://careers.immersivelabs.com</u></p><br><p><strong>Cyber threats wait for no one and neither should you. Apply now!</strong></p><br><p><strong><br>If you would like to read more about what you can expect from our recruitment process, you can visit our dedicated interview process page.</strong></p><br> </div>

<p><h4>Description</h4> <p>The incident response analyst is responsible for investigating, containing, eradicating, and supporting the recovery of cybersecurity incidents across customer and enterprise environments. The role plays a critical part in minimizing business impact from cyber threats by coordinating response activities, performing technical investigations, and supporting the continuous improvement of incident response capabilities.</p> <p>The role collaborates closely with security operations, threat intelligence, digital forensics, and customer IT teams to identify attack vectors, contain threats, and strengthen organizational resilience against future incidents.</p> <h4>Responsibilities</h4> <h4>Incident investigation & response</h4> <ul> <li>Respond to security incidents within defined SLAs and escalation procedures.</li> <li>Perform detailed investigations to determine nature of the attack, scope of compromise, impacted systems, attack vectors, and potential business impact.</li> <li>Analyze indicators of compromise (IOCs) and attacker activity.</li> <li>Identify containment, eradication, and recovery actions required to mitigate incidents.</li> <li>Coordinate incident response activities with internal and customer stakeholders.</li> </ul> <h4>Threat analysis & root cause investigation</h4> <ul> <li>Conduct in-depth analysis of security incidents and suspicious activities.</li> <li>Identify vulnerabilities, attack techniques, and security gaps contributing to incidents.</li> <li>Perform root cause analysis to determine how incidents occurred and identify preventive controls.</li> <li>Analyze attacker tactics, techniques, and procedures (TTPs) using industry frameworks such as MITRE ATT&CK.</li> </ul> <h4>Incident coordination & escalation</h4> <ul> <li>Manage incident response activities across multiple technical teams.</li> <li>Escalate incidents requiring digital forensics support, specialized technical expertise, and malware analysis.</li> <li>Coordinate communication between technical teams, management, and customer stakeholders.</li> <li>Support crisis management activities during major incidents.</li> </ul> <h4>Documentation & reporting</h4> <ul> <li>Prepare detailed incident reports documenting findings, impact assessments, root cause analysis, and remediation recommendations.</li> <li>Maintain investigation records and evidence documentation.</li> <li>Support development of executive-level incident summaries and post-incident reviews.</li> </ul> <h4>Process improvement & readiness</h4> <ul> <li>Support the development and enhancement of incident response playbooks, response procedures, and investigation methodologies.</li> <li>Participate in tabletop exercises and incident simulations.</li> <li>Identify opportunities to improve response effectiveness and operational readiness.</li> </ul> <h4>Our culture & code of conduct</h4> <p>At ZainTECH, we take pride in a culture built on collaboration, innovation, and uncompromising integrity. We are looking for individuals who share these values and are committed to customer-centricity and ethical excellence. All employees are expected to uphold our code of conduct, which serves as a guiding framework for responsible behaviour across everything we do - from how we work with each other to how we engage with clients and partners globally.</p> <h4>Requirements</h4> <ul> <li>Bachelor's degree or intermediate diploma (minimum) from a recognised institution.</li> <li>Minimum 3 years experience in cybersecurity / information security, including 1 or more years in incident response.</li> <li>At least one valid NCSC-approved IR certification like ECIH, CCIM, Blue Team Level 2, or another equivalent certification in the same field that is approved by the NCSC.</li> <li>Practical skills in log analysis, endpoint and network investigation, malware triage, and use of IR tooling.</li> <li>Exposure to SIEM/SOAR and EDR platforms is preferable.</li> <li>Experience in an MSSP or SOC environment is preferable.</li> </ul></p><p></p>

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> <span>The Incident Response Analyst is responsible for investigating, containing, eradicating, and supporting the recovery of cybersecurity incidents across customer and enterprise environments.<br> The role plays a critical part in minimizing business impact from cyber threats by coordinating response activities, performing technical investigations, and supporting the continuous improvement of incident response capabilities.<br> The role collaborates closely with Security Operations, Threat Intelligence, Digital Forensics, and customer IT teams to identify attack vectors, contain threats, and strengthen organizational resilience against future incidents.<br> Responsibilities: Incident Investigation &amp; Response Respond to security incidents within defined SLAs and escalation procedures.<br> Perform detailed investigations to determine Nature of the attack, Scope of compromise, Impacted systems, Attack vectors and Potential business impact Analyze indicators of compromise (IOCs) and attacker activity.<br> Identify containment, eradication, and recovery actions required to mitigate incidents.<br> Coordinate incident response activities with internal and customer stakeholders.<br> Threat Analysis &amp; Root Cause Investigation Conduct in-depth analysis of security incidents and suspicious activities.<br> Identify vulnerabilities, attack techniques, and security gaps contributing to incidents.<br> Perform root cause analysis to determine how incidents occurred and identify preventive controls.<br> Analyze attacker tactics, techniques, and procedures (TTPs) using industry frameworks such as MITRE ATT&amp;CK.<br> Incident Coordination &amp; Escalation Manage incident response activities across multiple technical teams.<br> Escalate incidents requiring Digital Forensics support, Specialized technical expertise and Malware analysis Coordinate communication between technical teams, management, and customer stakeholders.<br> Support crisis management activities during major incidents.<br> Documentation &amp; Reporting Prepare detailed incident reports documenting Findings, Impact assessments, Root cause analysis and Remediation recommendations Maintain investigation records and evidence documentation.<br> Support development of executive-level incident summaries and post-incident reviews.<br> Process Improvement &amp; Readiness Support the development and enhancement of Incident response playbooks, Response procedures and Investigation methodologies Participate in tabletop exercises and incident simulations.<br> Identify opportunities to improve response effectiveness and operational readiness.<br> Our Culture &amp; Code of Conduct: At ZainTECH, we take pride in a culture built on collaboration, innovation, and uncompromising integrity.<br> We are looking for individuals who share these values and are committed to customer-centricity and ethical excellence.<br> All employees are expected to uphold our Code of Conduct, which serves as a guiding framework for responsible behaviour across everything we do — from how we work with each other to how we engage with clients and partners globally.<br> Bachelor's degree or intermediate diploma (minimum) from a recognised institution.<br> Minimum 3 years experience in cybersecurity / information security, including 1 or more years in incident response.<br> At least one valid NCSC-approved IR certification like (ECIH, CCIM, Blue Team Level 2) or another equivalent certification in the same field that is approved by the NCSC.<br> Practical skills in log analysis, endpoint and network investigation, malware triage, and use of IR tooling.<br> Exposure to SIEM/SOAR and EDR platforms is preferable.<br> Experience in an MSSP or SOC environment is preferable.<br></span> </div>

<p><h4>Description</h4> <p>The incident response team leader is responsible for leading cybersecurity incident response activities, managing complex investigations, and overseeing the delivery of incident response services across customer and enterprise environments. The role provides technical leadership, operational oversight, and strategic direction for incident response engagements while ensuring effective coordination of resources during security incidents.</p> <p>This role serves as the primary escalation point for major cybersecurity incidents and plays a key role in strengthening incident response readiness, improving operational maturity, and ensuring compliance with NCSC licensing requirements.</p> <h4>Responsibilities</h4> <p><strong>Incident response leadership</strong><br> Lead cybersecurity incident response engagements from identification through recovery.<br> Direct technical response teams during major security incidents, ransomware attacks, and data breaches.<br> Coordinate containment, eradication, recovery, and remediation activities.<br> Act as the primary incident commander during major incidents.</p> <p><strong>Advanced incident investigation</strong><br> Oversee complex investigations involving malware outbreaks, insider threats, targeted attacks, and data exfiltration incidents.<br> Validate investigation findings and response recommendations.<br> Provide technical leadership during high-severity incidents.<br> Support digital forensics activities where required.</p> <p><strong>Team management & development</strong><br> Lead, mentor, and develop incident response analysts.<br> Conduct technical coaching, performance management, skills development initiatives, and incident response readiness activities.<br> Support recruitment and onboarding of new team members.<br> Drive continuous capability development across the incident response function.</p> <p><strong>Governance & stakeholder management</strong><br> Serve as the primary customer-facing lead during major incidents.<br> Provide executive briefings and incident status updates.<br> Support regulatory, compliance, and reporting obligations.<br> Ensure adherence to incident response policies, service level agreements, and NCSC operational requirements.</p> <p><strong>Program development & continuous improvement</strong><br> Develop and maintain incident response frameworks, playbooks, runbooks, and response procedures.<br> Lead tabletop exercises and simulation activities.<br> Conduct post-incident reviews and lessons learned sessions.<br> Drive improvements to organizational cyber resilience and response capabilities.</p> <h4>Our culture & code of conduct</h4> <p>At ZainTECH, we take pride in a culture built on collaboration, innovation, and uncompromising integrity. We are looking for individuals who share these values and are committed to customer-centricity and ethical excellence. All employees are expected to uphold our code of conduct, which serves as a guiding framework for responsible behavior across everything we do—from how we work with each other to how we engage with clients and partners globally.</p> <h4>Requirements</h4> <ul> <li>Bachelor's degree (minimum) in information technology or a related field.</li> <li>Minimum 5 years in cybersecurity/information security, including 3 or more years specifically in incident response.</li> <li>At least one valid NCSC-approved IR certification like ECIH, CCIM, Blue Team Level 2, or another equivalent certification in the same field that is approved by the NCSC.</li> <li>Technical command: hands-on expertise in incident triage, forensics-aware investigation, containment, and recovery across endpoint, network, and cloud.</li> <li>Leadership: proven ability to lead an analyst team under pressure and communicate clearly with clients and the NCSC.</li> <li>Advanced degree in cybersecurity or a related discipline is preferable.</li> <li>Additional credentials such as GCIH, GCFA, or vendor EDR/SOAR are preferable.</li> <li>Experience in an MSSP, telco-affiliated SOC, or national CERT/CSIRT environment is preferable.</li> </ul></p><p></p>

<p><h4>Description</h4> <p>The incident response team leader is responsible for leading cybersecurity incident response activities, managing complex investigations, and overseeing the delivery of incident response services across customer and enterprise environments. The role provides technical leadership, operational oversight, and strategic direction for incident response engagements while ensuring effective coordination of resources during security incidents.</p> <p>This role serves as the primary escalation point for major cybersecurity incidents and plays a key role in strengthening incident response readiness, improving operational maturity, and ensuring compliance with NCSC licensing requirements.</p> <h4>Responsibilities</h4> <p><strong>Incident response leadership</strong><br> Lead cybersecurity incident response engagements from identification through recovery.<br> Direct technical response teams during major security incidents, ransomware attacks, and data breaches.<br> Coordinate containment, eradication, recovery, and remediation activities.<br> Act as the primary incident commander during major incidents.</p> <p><strong>Advanced incident investigation</strong><br> Oversee complex investigations involving malware outbreaks, insider threats, targeted attacks, and data exfiltration incidents.<br> Validate investigation findings and response recommendations.<br> Provide technical leadership during high-severity incidents.<br> Support digital forensics activities where required.</p> <p><strong>Team management & development</strong><br> Lead, mentor, and develop incident response analysts.<br> Conduct technical coaching, performance management, skills development initiatives, and incident response readiness activities.<br> Support recruitment and onboarding of new team members.<br> Drive continuous capability development across the incident response function.</p> <p><strong>Governance & stakeholder management</strong><br> Serve as the primary customer-facing lead during major incidents.<br> Provide executive briefings and incident status updates.<br> Support regulatory, compliance, and reporting obligations.<br> Ensure adherence to incident response policies, service level agreements, and NCSC operational requirements.</p> <p><strong>Program development & continuous improvement</strong><br> Develop and maintain incident response frameworks, playbooks, runbooks, and response procedures.<br> Lead tabletop exercises and simulation activities.<br> Conduct post-incident reviews and lessons learned sessions.<br> Drive improvements to organizational cyber resilience and response capabilities.</p> <h4>Our culture & code of conduct</h4> <p>At ZainTECH, we take pride in a culture built on collaboration, innovation, and uncompromising integrity. We are looking for individuals who share these values and are committed to customer-centricity and ethical excellence. All employees are expected to uphold our code of conduct, which serves as a guiding framework for responsible behavior across everything we do—from how we work with each other to how we engage with clients and partners globally.</p> <h4>Requirements</h4> <ul> <li>Bachelor's degree (minimum) in information technology or a related field.</li> <li>Minimum 5 years in cybersecurity/information security, including 3 or more years specifically in incident response.</li> <li>At least one valid NCSC-approved IR certification like ECIH, CCIM, Blue Team Level 2, or another equivalent certification in the same field that is approved by the NCSC.</li> <li>Technical command: hands-on expertise in incident triage, forensics-aware investigation, containment, and recovery across endpoint, network, and cloud.</li> <li>Leadership: proven ability to lead an analyst team under pressure and communicate clearly with clients and the NCSC.</li> <li>Advanced degree in cybersecurity or a related discipline is preferable.</li> <li>Additional credentials such as GCIH, GCFA, or vendor EDR/SOAR are preferable.</li> <li>Experience in an MSSP, telco-affiliated SOC, or national CERT/CSIRT environment is preferable.</li> </ul></p><p></p>