وظائف مهندسى امن معلومات في الأردن

<p><h4>Description</h4> <p>The Specialist Network Engineer - Cisco Security is responsible for designing, implementing, and supporting enterprise network security solutions with a primary focus on Cisco Identity Services Engine (ISE) and Cisco Firepower technologies (FTD & FMC). The role involves managing network access control (NAC), authentication services, firewall policies, VPN solutions, and advanced threat protection to ensure secure and reliable enterprise infrastructure operations. The engineer works closely with network, infrastructure, and security teams to deploy and optimize security controls across wired, wireless, and remote access environments. Key responsibilities include configuring Cisco ISE for authentication, authorization, posture assessment, and device profiling, as well as administering Cisco Firepower firewalls, IPS, AMP, and URL filtering features.</p> <p>The role also includes monitoring security infrastructure, troubleshooting complex network security issues, performing system upgrades, and responding to security incidents. Additionally, the engineer is responsible for maintaining security documentation, enforcing organizational security standards, and contributing to continuous improvement initiatives to strengthen the company’s overall security posture. The ideal candidate should possess strong hands-on experience with Cisco security technologies, enterprise networking concepts, and security best practices.</p> <h4>Responsibilities</h4> <ul> <li><strong>Cisco ISE (Identity Services Engine) Administration</strong> <ul> <li>Design, deploy, and maintain Cisco ISE solutions for Network Access Control (NAC)</li> <li>Configure and manage AAA services using: <ul> <li>802.1X</li> <li>MAB</li> <li>TACACS+</li> </ul> </li> <li>Manage and support: <ul> <li>Guest access portals</li> <li>BYOD onboarding</li> <li>Posture assessment policies</li> </ul> </li> <li>Integrate Cisco ISE with Active Directory and identity management systems</li> <li>Troubleshoot authentication and authorization issues across wired and wireless environments</li> <li>Define and enforce access control policies based on user roles, device profiling, and security posture</li> </ul> </li> <li><strong>Cisco Firepower (FTD & FMC) Management</strong> <ul> <li>Manage Cisco Firepower (FTD & FMC) environments</li> <li>Firewall policies</li> <li>Site-to-site and remote access VPNs</li> <li>Monitor security features like IPS, AMP, URL filtering</li> <li>Perform upgrades, patching, and security monitoring</li> </ul> </li> <li><strong>Security Operations</strong> <ul> <li>Monitor and troubleshoot network security issues</li> <li>Support incident response and root cause analysis</li> <li>Ensure infrastructure availability and compliance</li> </ul> </li> <li><strong>Documentation & Continuous Improvement</strong> <ul> <li>Maintain documentation of security configurations, policies, and operational procedures</li> <li>Contribute to the development of network security standards and best practices</li> <li>Identify opportunities to improve security posture, operational efficiency, and infrastructure resilience</li> </ul> </li> </ul> <h4>Requirements</h4> <ul> <li>Bachelor’s degree in Computer Science, Information Technology, or related field, or equivalent experience</li> <li>3–5+ years of experience in network security or security engineering roles</li> <li>Hands-on experience with Cisco ISE and Cisco Firepower (FTD & FMC) technologies</li> <li>Experience supporting enterprise-scale network security environments and NAC solutions</li> <li>Strong understanding of TCP/IP networking, VLANs, routing, switching, and security architectures</li> <li>Experience with VPN technologies, firewall policy management, and security monitoring/log analysis</li> <li>Knowledge of enterprise security best practices, access control frameworks, and incident troubleshooting</li> </ul></p><p></p>

<p><h4>Description</h4> <p>The Network Engineer - Cisco Security is responsible for designing, implementing, and supporting enterprise network security solutions with a primary focus on Cisco Identity Services Engine (ISE) and Cisco Firepower technologies (FTD & FMC). The role involves managing network access control (NAC), authentication services, firewall policies, VPN solutions, and advanced threat protection to ensure secure and reliable enterprise infrastructure operations. The engineer works closely with network, infrastructure, and security teams to deploy and optimize security controls across wired, wireless, and remote access environments. Key responsibilities include configuring Cisco ISE for authentication, authorization, posture assessment, and device profiling, as well as administering Cisco Firepower firewalls, IPS, AMP, and URL filtering features.</p> <p>The role also includes monitoring security infrastructure, troubleshooting complex network security issues, performing system upgrades, and responding to security incidents. Additionally, the engineer is responsible for maintaining security documentation, enforcing organizational security standards, and contributing to continuous improvement initiatives to strengthen the company’s overall security posture. The ideal candidate should possess strong hands-on experience with Cisco security technologies, enterprise networking concepts, and security best practices.</p> <h4>Responsibilities:</h4> <ul> <li><strong>Cisco ISE (Identity Services Engine) Administration</strong></li> <li>Design, deploy, and maintain Cisco ISE solutions for Network Access Control (NAC)</li> <li>Configure and manage AAA services using: <ul> <li>802.1X</li> <li>MAB</li> <li>TACACS+</li> </ul> </li> <li>Manage and support: <ul> <li>Guest access portals</li> <li>BYOD onboarding</li> <li>Posture assessment policies</li> </ul> </li> <li>Integrate Cisco ISE with Active Directory and identity management systems</li> <li>Troubleshoot authentication and authorization issues across wired and wireless environments</li> <li>Define and enforce access control policies based on user roles, device profiling, and security posture</li> <li><strong>Cisco Firepower (FTD & FMC) Management</strong></li> <li>Manage Cisco Firepower (FTD & FMC) environments</li> <li>Firewall policies</li> <li>Site-to-site & remote access VPNs</li> <li>Monitor security features like IPS, AMP, URL filtering</li> <li>Perform upgrades, patching, and security monitoring</li> <li><strong>Security Operations</strong></li> <li>Monitor and troubleshoot network security issues</li> <li>Support incident response and root cause analysis</li> <li>Ensure infrastructure availability and compliance</li> <li><strong>Documentation & Continuous Improvement</strong></li> <li>Maintain documentation of security configurations, policies, and operational procedures</li> <li>Contribute to the development of network security standards and best practices</li> <li>Identify opportunities to improve security posture, operational efficiency, and infrastructure resilience</li> </ul> <h4>Requirements</h4> <ul> <li>Bachelor’s degree in Computer Science, Information Technology, or related field, or equivalent experience</li> <li>3–5+ years of experience in network security or security engineering roles</li> <li>Hands-on experience with Cisco ISE and Cisco Firepower (FTD & FMC) technologies</li> <li>Experience supporting enterprise-scale network security environments and NAC solutions</li> <li>Strong understanding of TCP/IP networking, VLANs, routing, switching, and security architectures</li> <li>Experience with VPN technologies, firewall policy management, and security monitoring/log analysis</li> <li>Knowledge of enterprise security best practices, access control frameworks, and incident troubleshooting</li> </ul></p><p></p>

<p><h4>Description</h4> <p>The Network Engineer - Cisco Security is responsible for designing, implementing, and supporting enterprise network security solutions with a primary focus on Cisco Identity Services Engine (ISE) and Cisco Firepower technologies (FTD & FMC). The role involves managing network access control (NAC), authentication services, firewall policies, VPN solutions, and advanced threat protection to ensure secure and reliable enterprise infrastructure operations. The engineer works closely with network, infrastructure, and security teams to deploy and optimize security controls across wired, wireless, and remote access environments. Key responsibilities include configuring Cisco ISE for authentication, authorization, posture assessment, and device profiling, as well as administering Cisco Firepower firewalls, IPS, AMP, and URL filtering features.</p> <p>The role also includes monitoring security infrastructure, troubleshooting complex network security issues, performing system upgrades, and responding to security incidents. Additionally, the engineer is responsible for maintaining security documentation, enforcing organizational security standards, and contributing to continuous improvement initiatives to strengthen the company’s overall security posture. The ideal candidate should possess strong hands-on experience with Cisco security technologies, enterprise networking concepts, and security best practices.</p> <h4>Responsibilities:</h4> <ul> <li><strong>Cisco ISE (Identity Services Engine) Administration</strong></li> <li>Design, deploy, and maintain Cisco ISE solutions for Network Access Control (NAC)</li> <li>Configure and manage AAA services using: <ul> <li>802.1X</li> <li>MAB</li> <li>TACACS+</li> </ul> </li> <li>Manage and support: <ul> <li>Guest access portals</li> <li>BYOD onboarding</li> <li>Posture assessment policies</li> </ul> </li> <li>Integrate Cisco ISE with Active Directory and identity management systems</li> <li>Troubleshoot authentication and authorization issues across wired and wireless environments</li> <li>Define and enforce access control policies based on user roles, device profiling, and security posture</li> <li><strong>Cisco Firepower (FTD & FMC) Management</strong></li> <li>Manage Cisco Firepower (FTD & FMC) environments</li> <li>Firewall policies</li> <li>Site-to-site & remote access VPNs</li> <li>Monitor security features like IPS, AMP, URL filtering</li> <li>Perform upgrades, patching, and security monitoring</li> <li><strong>Security Operations</strong></li> <li>Monitor and troubleshoot network security issues</li> <li>Support incident response and root cause analysis</li> <li>Ensure infrastructure availability and compliance</li> <li><strong>Documentation & Continuous Improvement</strong></li> <li>Maintain documentation of security configurations, policies, and operational procedures</li> <li>Contribute to the development of network security standards and best practices</li> <li>Identify opportunities to improve security posture, operational efficiency, and infrastructure resilience</li> </ul> <h4>Requirements</h4> <ul> <li>Bachelor’s degree in Computer Science, Information Technology, or related field, or equivalent experience</li> <li>3–5+ years of experience in network security or security engineering roles</li> <li>Hands-on experience with Cisco ISE and Cisco Firepower (FTD & FMC) technologies</li> <li>Experience supporting enterprise-scale network security environments and NAC solutions</li> <li>Strong understanding of TCP/IP networking, VLANs, routing, switching, and security architectures</li> <li>Experience with VPN technologies, firewall policy management, and security monitoring/log analysis</li> <li>Knowledge of enterprise security best practices, access control frameworks, and incident troubleshooting</li> </ul></p><p></p>

<p><h4>Description</h4> <p>The penetration testing team leader is responsible for leading ZainTECH’s licensed penetration testing capability within the cybersecurity advisory services practice. The role oversees the delivery of offensive security engagements across enterprise, government, and critical infrastructure customers throughout the MENA region, ensuring all testing activities are performed in accordance with industry best practices, recognized testing methodologies, and NCSC Jordan licensing requirements. The role combines hands-on technical leadership with team management, customer engagement, and service governance responsibilities.</p> <p>Also responsible for managing penetration testing engagements, developing offensive security capabilities, assuring quality of deliverables, and strengthening customer security postures through actionable remediation guidance.</p> <h4>Responsibilities</h4> <p><strong>Penetration testing engagement leadership</strong><br> Lead and manage penetration testing engagements across infrastructure, web, wireless, and applications to a recognized methodology.<br> Define engagement scope, objectives, testing methodology, and rules of engagement.<br> Ensure all testing activities are conducted safely and within approved customer authorizations.<br> Manage engagement timelines, resources, and delivery quality.<br> Act as the primary technical lead throughout the penetration testing lifecycle.</p> <p><strong>Offensive security delivery</strong><br> Perform advanced penetration testing activities using both manual and automated testing techniques.<br> Identify, validate, and demonstrate security vulnerabilities and attack paths.<br> Assess exploitability, business impact, and risk exposure associated with identified findings.<br> Conduct vulnerability assessments, penetration testing, security validation exercises, configuration reviews, and red team-style activities where applicable.<br> Support retesting activities following remediation efforts.</p> <p><strong>Quality assurance & technical review</strong><br> Review and validate penetration testing findings prior to customer delivery.<br> Ensure reports are technically accurate, risk-rated appropriately, actionable and business-focused, and aligned with industry standards.<br> Review attack chains and exploitation methodologies to ensure consistency and quality.<br> Maintain testing methodologies aligned with OWASP Testing Guide, PTES, OSSTMM, NIST guidance, and industry best practices.</p> <p><strong>Customer engagement & advisory services</strong><br> Present technical findings and executive summaries to customer stakeholders.<br> Conduct remediation workshops and technical review sessions.<br> Support customers in understanding security risks, threat exposure, and recommended remediation activities.<br> Provide strategic guidance on improving overall security posture.<br> Support presales activities, customer workshops, and cybersecurity assessments where required.</p> <p><strong>Team leadership & capability development</strong><br> Lead, mentor, and develop penetration testers within the cybersecurity practice.<br> Conduct technical coaching, skills development programs, knowledge-sharing sessions, and offensive security training initiatives.<br> Support recruitment, onboarding, and capability development activities.<br> Ensure team certifications remain current and aligned with NCSC requirements.<br> Drive continuous improvement across offensive security methodologies and tooling.</p> <p><strong>Governance, compliance & service development</strong><br> Ensure compliance with NCSC Jordan licensing requirements, internal security policies, customer contractual obligations, and regulatory requirements.<br> Enforce secure testing practices, confidentiality requirements, and evidence handling procedures.<br> Support service development initiatives to expand ZainTECH’s offensive security capabilities.<br> Maintain operational documentation, testing standards, and quality assurance processes.<br> Coordinate reporting and compliance activities required by NCSC and other regulatory stakeholders.</p> <h4>Our culture & code of conduct</h4> <p>At ZainTECH, we take pride in a culture built on collaboration, innovation, and uncompromising integrity. We are looking for individuals who share these values and are committed to customer-centricity and ethical excellence. All employees are expected to uphold our code of conduct, which serves as a guiding framework for responsible behavior across everything we do — from how we work with each other to how we engage with clients and partners globally.</p> <h4>Requirements</h4> <ul> <li>Bachelor's degree (minimum) in information technology or a related field.</li> <li>Minimum 5 years experience in cybersecurity, including at least 5 completed penetration testing projects.</li> <li>At least one valid NCSC-approved penetration testing certification like CPENT, CEPT, OSCE, LPT, CPT, GPEN, or another internationally recognized, equivalent certification in the same field that is approved by the NCSC.</li> <li>Deep, hands-on offensive skills across network, web, wireless, and application testing, and command of recognized methodologies (OWASP, PTES, OSSTMM).</li> <li>Leadership: proven ability to lead a testing team and present to client executives.</li> <li>Advanced degree in cybersecurity or a related discipline is preferable.</li> <li>Advanced credentials such as OSCE, CPENT, LPT, or GPEN are preferable.</li> <li>Experience in red teaming or an MSSP/consultancy offensive practice is preferable.</li> </ul></p><p></p>

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> <p><strong>A platform you can believe in: Immersive One is the leading cyber resilience solution across the globe.</strong></p><br><p><strong>Showcase the value of the Immersive One platform and secure the technical win alongside a team of the brightest minds in cybersecurity. At Immersive, we’re uniquely positioned to future-proof organizations against any cyber challenge. If that excites you, read on!!</strong></p><br><p>Immersive is the cyber proving ground for the AI enterprise. Through Immersive One, organizations can test whether people, AI-enabled workflows, cyber security teams, agents, and leaders can perform securely under realistic pressure, then turn that performance into evidence they can use to improve, benchmark, and report readiness.</p><br><p>Trusted by 30%+ of the Fortune 100 and ranked #1 in the Forrester Wave™ 2026, Immersive helps organizations prove AI can be adopted safely, teams can develop and defend at AI speed, leaders can lead through crisis, and AI agents can be validated before they are trusted in live workflows</p><br><p><strong>https://www.immersivelabs.com/why-immersive-labs</strong></p><br><p>We help the world’s biggest brands like Citi, Pfizer, Humana, and HSBC, protect their revenues and brand reputations.</p><br><p><br>Immersive was founded in 2017, from a cargo container in Bristol, UK we’ve grown to over 300 employees globally, announced funding of more than $180 million and been voted a Best place to work on multiple occasions!</p><br><p><u>https://www.immersivelabs.com/company/our-story</u></p><br><p><em>“The speed at which Immersive Labs produces technical content is hugely impressive, and this turnaround has helped get our teams ahead of the curve, giving them hands-on experience with serious vulnerabilities, in a secure environment, as soon as they emerge.”</em></p><br><p>Head of Global Cybersecurity Operations, HSBC</p><br><p><br><strong>Solutions Consultant - Jordan <br></strong>We’re looking for an experienced cybersecurity professional with a number of years experience across the entire customer lifecycle - from pre-sales to post-sales and professional services - to join our growing Customer Experience team as a <strong>Solutions Consultant </strong>based in Jordan covering the METNA &amp; APAC region. </p><br><p>The <strong>Scale Team</strong> at Immersive is a high-velocity engine that serves a large volume of customers and prospects through a fast, repeatable, digitally-led motion. As a Solution Consultant on the Scale Team, you'll own technical pre-sales and the first two months of onboarding across many accounts, and deliver one-to-many enablement that gets customers to value quickly and supports their migration to the Immersive One Core platform.</p><br><p>This is a role for someone who's energised by breadth, pace, and impact at scale — who'd rather run a sharp, repeatable motion across many customers than immerse deeply in a single account. You'll work as part of the Scale Team alongside our Inside Sales Reps and Customer Operations, turning qualified opportunities into demos, trials, onboardings, and adoption — fast!</p><br><strong>What You'll Do</strong><strong>Pre-sales demos and trials</strong><ul><li><p>Deliver product demonstrations built on the qualification Sales has completed, tailored quickly to the prospect's use case</p><br></li><li><p>Rank solution fit (Green / Yellow / Red / NA) to steer where Sales invests their time</p><br></li><li><p>Set up and run in-platform free trials, with one or two coaching sessions to guide prospects through the key features — proving value live, without bespoke success plans or post-POV reports</p><br></li><li><p>Answer technical questions and flag obvious blockers early</p><br></li><li><p>Maintain strong working knowledge of the Immersive platform and competitor technologies</p><br></li></ul><strong>Onboard new customers (first 60 days)</strong><ul><li><p>Run kick-off sessions and deliver a contained onboarding within a strict two-month window across a small number of meetings</p><br></li><li><p>Provide light-touch integration guidance — point customers to documentation and standard connectors, and route deeper technical needs to Support</p><br></li><li><p>Run month-one and month-two check-in and coaching sessions, with the digital academy as the core enablement engine</p><br></li></ul><strong>Drive adoption and migration at scale</strong><ul><li><p>Deliver one-to-many activities — webinars, workshops, and Cyber Digital Bootcamps — to drive adoption and value across the customer base</p><br></li><li><p>Support the phased migration of Standard customers to Immersive One Core, contributing to repeatable enablement content and self-serve resources</p><br></li><li><p>Re-engage on expansion when a signal appears, running the same light demo / trial-coaching motion for the expansion scope</p><br></li></ul><strong>Across everything</strong><ul><li><p>Partner closely with Inside Sales Reps and Customer Operations to keep the motion efficient</p><br></li><li><p>Serve as the voice of the customer to our product, content, and engineering teams to influence innovation</p><br></li><li><p>Stay informed of evolving threats, AI, trends, and new technologies</p><br></li></ul><strong>Sounds good? We’d love to hear from you if you have proven experience in the following areas, but don’t worry if you don’t hit each one exactly, although experience working within cybersecurity is essential:</strong><ul><li><p>2+ years in sales engineering, solutions consulting, technical onboarding, or a technical customer-facing role — ideally in a SaaS or cybersecurity environment</p><br></li><li><p>Comfortable working at high volume and pace, running repeatable motions across many accounts and keeping engagements within tight time boxes</p><br></li><li><p>You're a confident presenter to both technical and non-technical audiences, including one-to-many formats such as webinars and bootcamps</p><br></li><li><p>Able to qualify and prioritise quickly, and to communicate technical concepts in a clear, jargon-free way</p><br></li><li><p>Proficiency in IT fundamentals (computer hardware/software, databases, networking, security, and software development)</p><br></li><li><p>Knowledge of information security concepts, domains, compliance, and standards</p><br></li></ul><ul><li><p>Experience delivering onboarding, enablement, or one-to-many sessions at scale</p><br></li><li><p>Familiarity with product-led growth (PLG) or digitally-led customer motions</p><br></li><li><p>Hands-on experience with Windows &amp; Linux operating systems, security tools (IDS, firewalls, anti-malware, SIEM), and public cloud environments would be useful but not essential</p><br><p><strong>Immersive’s growth has been fuelled by our values that underpin everything we do, here's how they relate to this role:</strong></p><br></li><li><p><strong>Driven</strong> - We push the boundaries of innovation, acting swiftly to achieve ambitious outcomes. Our drive embodies a culture of ambition, where challenges are stepping stones to excellence.</p><br></li><li><p><strong>Inclusive</strong> - Our strength lies in diversity, fostering a culture where every individual contributes to our collective strength. We champion open dialogue and empathy, ensuring a collaborative, inclusive workplace.</p><br></li><li><p><strong>Customer Centric</strong> - We seek to develop deep relationships with our customers to help them achieve their business outcomes. We exceed our customers and partners expectations by crafting products, services and experience that surprise, delight and ensuring they feel valued and supported every day.</p><br></li><li><p><strong>One Team - </strong>We are a talented global team working together to achieve our vision. Central to our ethos, resilience means adapting and thriving in adversity. It guides our innovation, ensuring we and our clients are prepared for the future.</p><br></li></ul><p>If you would like to read more about what you can expect from our recruitment process, you can visit our dedicated <u>interview process</u> page.</p><br><p><strong><br>As well as an inclusive, supportive place for you to be you. We offer an extensive range of benefits so you can do your very best work:</strong></p><br><ul><li><p>Time off, flexible and remote working so you can work when is best for you, includes 25 days annual leave + 2 volunteering days and birthday half day</p><br></li><li><p>Look after your family and yourself with enhanced parental leave, mindfulness groups, critical illness cover,</p><br></li><li><p>Career and learning development through the platform and our ‘Learn Anything’ fund</p><br></li><li><p>Share in the companies success with share options, sales incentives and Recognition &amp; Rewards for doing great work and living our values and behaviours</p><br></li><li><p>Informal or formal flexible working options, e.g. flexible start and finish times, reduced hours, job share, remote working</p><br></li><li><p>We’re a sociable, tight-knit team with monthly socials, and sports clubs. Our socials have included everything from pottery painting and paper mask making, to movie nights and escape rooms</p><br></li><li><p>While this is a remote position, we do all meet in our EMEA HQ on a bi annual basis and regularly in person in region.</p><br></li></ul><p>Find out more about life at Immersive <u>https://careers.immersivelabs.com</u></p><br><p><strong>Cyber threats wait for no one and neither should you. Apply now!</strong></p><br><p><strong><br>If you would like to read more about what you can expect from our recruitment process, you can visit our dedicated interview process page.</strong></p><br> </div>

<p><h4>Description</h4> <p>The incident response analyst is responsible for investigating, containing, eradicating, and supporting the recovery of cybersecurity incidents across customer and enterprise environments. The role plays a critical part in minimizing business impact from cyber threats by coordinating response activities, performing technical investigations, and supporting the continuous improvement of incident response capabilities.</p> <p>The role collaborates closely with security operations, threat intelligence, digital forensics, and customer IT teams to identify attack vectors, contain threats, and strengthen organizational resilience against future incidents.</p> <h4>Responsibilities</h4> <h4>Incident investigation & response</h4> <ul> <li>Respond to security incidents within defined SLAs and escalation procedures.</li> <li>Perform detailed investigations to determine nature of the attack, scope of compromise, impacted systems, attack vectors, and potential business impact.</li> <li>Analyze indicators of compromise (IOCs) and attacker activity.</li> <li>Identify containment, eradication, and recovery actions required to mitigate incidents.</li> <li>Coordinate incident response activities with internal and customer stakeholders.</li> </ul> <h4>Threat analysis & root cause investigation</h4> <ul> <li>Conduct in-depth analysis of security incidents and suspicious activities.</li> <li>Identify vulnerabilities, attack techniques, and security gaps contributing to incidents.</li> <li>Perform root cause analysis to determine how incidents occurred and identify preventive controls.</li> <li>Analyze attacker tactics, techniques, and procedures (TTPs) using industry frameworks such as MITRE ATT&CK.</li> </ul> <h4>Incident coordination & escalation</h4> <ul> <li>Manage incident response activities across multiple technical teams.</li> <li>Escalate incidents requiring digital forensics support, specialized technical expertise, and malware analysis.</li> <li>Coordinate communication between technical teams, management, and customer stakeholders.</li> <li>Support crisis management activities during major incidents.</li> </ul> <h4>Documentation & reporting</h4> <ul> <li>Prepare detailed incident reports documenting findings, impact assessments, root cause analysis, and remediation recommendations.</li> <li>Maintain investigation records and evidence documentation.</li> <li>Support development of executive-level incident summaries and post-incident reviews.</li> </ul> <h4>Process improvement & readiness</h4> <ul> <li>Support the development and enhancement of incident response playbooks, response procedures, and investigation methodologies.</li> <li>Participate in tabletop exercises and incident simulations.</li> <li>Identify opportunities to improve response effectiveness and operational readiness.</li> </ul> <h4>Our culture & code of conduct</h4> <p>At ZainTECH, we take pride in a culture built on collaboration, innovation, and uncompromising integrity. We are looking for individuals who share these values and are committed to customer-centricity and ethical excellence. All employees are expected to uphold our code of conduct, which serves as a guiding framework for responsible behaviour across everything we do - from how we work with each other to how we engage with clients and partners globally.</p> <h4>Requirements</h4> <ul> <li>Bachelor's degree or intermediate diploma (minimum) from a recognised institution.</li> <li>Minimum 3 years experience in cybersecurity / information security, including 1 or more years in incident response.</li> <li>At least one valid NCSC-approved IR certification like ECIH, CCIM, Blue Team Level 2, or another equivalent certification in the same field that is approved by the NCSC.</li> <li>Practical skills in log analysis, endpoint and network investigation, malware triage, and use of IR tooling.</li> <li>Exposure to SIEM/SOAR and EDR platforms is preferable.</li> <li>Experience in an MSSP or SOC environment is preferable.</li> </ul></p><p></p>

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> <span>The Incident Response Analyst is responsible for investigating, containing, eradicating, and supporting the recovery of cybersecurity incidents across customer and enterprise environments.<br> The role plays a critical part in minimizing business impact from cyber threats by coordinating response activities, performing technical investigations, and supporting the continuous improvement of incident response capabilities.<br> The role collaborates closely with Security Operations, Threat Intelligence, Digital Forensics, and customer IT teams to identify attack vectors, contain threats, and strengthen organizational resilience against future incidents.<br> Responsibilities: Incident Investigation &amp; Response Respond to security incidents within defined SLAs and escalation procedures.<br> Perform detailed investigations to determine Nature of the attack, Scope of compromise, Impacted systems, Attack vectors and Potential business impact Analyze indicators of compromise (IOCs) and attacker activity.<br> Identify containment, eradication, and recovery actions required to mitigate incidents.<br> Coordinate incident response activities with internal and customer stakeholders.<br> Threat Analysis &amp; Root Cause Investigation Conduct in-depth analysis of security incidents and suspicious activities.<br> Identify vulnerabilities, attack techniques, and security gaps contributing to incidents.<br> Perform root cause analysis to determine how incidents occurred and identify preventive controls.<br> Analyze attacker tactics, techniques, and procedures (TTPs) using industry frameworks such as MITRE ATT&amp;CK.<br> Incident Coordination &amp; Escalation Manage incident response activities across multiple technical teams.<br> Escalate incidents requiring Digital Forensics support, Specialized technical expertise and Malware analysis Coordinate communication between technical teams, management, and customer stakeholders.<br> Support crisis management activities during major incidents.<br> Documentation &amp; Reporting Prepare detailed incident reports documenting Findings, Impact assessments, Root cause analysis and Remediation recommendations Maintain investigation records and evidence documentation.<br> Support development of executive-level incident summaries and post-incident reviews.<br> Process Improvement &amp; Readiness Support the development and enhancement of Incident response playbooks, Response procedures and Investigation methodologies Participate in tabletop exercises and incident simulations.<br> Identify opportunities to improve response effectiveness and operational readiness.<br> Our Culture &amp; Code of Conduct: At ZainTECH, we take pride in a culture built on collaboration, innovation, and uncompromising integrity.<br> We are looking for individuals who share these values and are committed to customer-centricity and ethical excellence.<br> All employees are expected to uphold our Code of Conduct, which serves as a guiding framework for responsible behaviour across everything we do — from how we work with each other to how we engage with clients and partners globally.<br> Bachelor's degree or intermediate diploma (minimum) from a recognised institution.<br> Minimum 3 years experience in cybersecurity / information security, including 1 or more years in incident response.<br> At least one valid NCSC-approved IR certification like (ECIH, CCIM, Blue Team Level 2) or another equivalent certification in the same field that is approved by the NCSC.<br> Practical skills in log analysis, endpoint and network investigation, malware triage, and use of IR tooling.<br> Exposure to SIEM/SOAR and EDR platforms is preferable.<br> Experience in an MSSP or SOC environment is preferable.<br></span> </div>

<p><h4>Description</h4> <p>The incident response team leader is responsible for leading cybersecurity incident response activities, managing complex investigations, and overseeing the delivery of incident response services across customer and enterprise environments. The role provides technical leadership, operational oversight, and strategic direction for incident response engagements while ensuring effective coordination of resources during security incidents.</p> <p>This role serves as the primary escalation point for major cybersecurity incidents and plays a key role in strengthening incident response readiness, improving operational maturity, and ensuring compliance with NCSC licensing requirements.</p> <h4>Responsibilities</h4> <p><strong>Incident response leadership</strong><br> Lead cybersecurity incident response engagements from identification through recovery.<br> Direct technical response teams during major security incidents, ransomware attacks, and data breaches.<br> Coordinate containment, eradication, recovery, and remediation activities.<br> Act as the primary incident commander during major incidents.</p> <p><strong>Advanced incident investigation</strong><br> Oversee complex investigations involving malware outbreaks, insider threats, targeted attacks, and data exfiltration incidents.<br> Validate investigation findings and response recommendations.<br> Provide technical leadership during high-severity incidents.<br> Support digital forensics activities where required.</p> <p><strong>Team management & development</strong><br> Lead, mentor, and develop incident response analysts.<br> Conduct technical coaching, performance management, skills development initiatives, and incident response readiness activities.<br> Support recruitment and onboarding of new team members.<br> Drive continuous capability development across the incident response function.</p> <p><strong>Governance & stakeholder management</strong><br> Serve as the primary customer-facing lead during major incidents.<br> Provide executive briefings and incident status updates.<br> Support regulatory, compliance, and reporting obligations.<br> Ensure adherence to incident response policies, service level agreements, and NCSC operational requirements.</p> <p><strong>Program development & continuous improvement</strong><br> Develop and maintain incident response frameworks, playbooks, runbooks, and response procedures.<br> Lead tabletop exercises and simulation activities.<br> Conduct post-incident reviews and lessons learned sessions.<br> Drive improvements to organizational cyber resilience and response capabilities.</p> <h4>Our culture & code of conduct</h4> <p>At ZainTECH, we take pride in a culture built on collaboration, innovation, and uncompromising integrity. We are looking for individuals who share these values and are committed to customer-centricity and ethical excellence. All employees are expected to uphold our code of conduct, which serves as a guiding framework for responsible behavior across everything we do—from how we work with each other to how we engage with clients and partners globally.</p> <h4>Requirements</h4> <ul> <li>Bachelor's degree (minimum) in information technology or a related field.</li> <li>Minimum 5 years in cybersecurity/information security, including 3 or more years specifically in incident response.</li> <li>At least one valid NCSC-approved IR certification like ECIH, CCIM, Blue Team Level 2, or another equivalent certification in the same field that is approved by the NCSC.</li> <li>Technical command: hands-on expertise in incident triage, forensics-aware investigation, containment, and recovery across endpoint, network, and cloud.</li> <li>Leadership: proven ability to lead an analyst team under pressure and communicate clearly with clients and the NCSC.</li> <li>Advanced degree in cybersecurity or a related discipline is preferable.</li> <li>Additional credentials such as GCIH, GCFA, or vendor EDR/SOAR are preferable.</li> <li>Experience in an MSSP, telco-affiliated SOC, or national CERT/CSIRT environment is preferable.</li> </ul></p><p></p>

<p><h4>Description</h4> <p>The incident response team leader is responsible for leading cybersecurity incident response activities, managing complex investigations, and overseeing the delivery of incident response services across customer and enterprise environments. The role provides technical leadership, operational oversight, and strategic direction for incident response engagements while ensuring effective coordination of resources during security incidents.</p> <p>This role serves as the primary escalation point for major cybersecurity incidents and plays a key role in strengthening incident response readiness, improving operational maturity, and ensuring compliance with NCSC licensing requirements.</p> <h4>Responsibilities</h4> <p><strong>Incident response leadership</strong><br> Lead cybersecurity incident response engagements from identification through recovery.<br> Direct technical response teams during major security incidents, ransomware attacks, and data breaches.<br> Coordinate containment, eradication, recovery, and remediation activities.<br> Act as the primary incident commander during major incidents.</p> <p><strong>Advanced incident investigation</strong><br> Oversee complex investigations involving malware outbreaks, insider threats, targeted attacks, and data exfiltration incidents.<br> Validate investigation findings and response recommendations.<br> Provide technical leadership during high-severity incidents.<br> Support digital forensics activities where required.</p> <p><strong>Team management & development</strong><br> Lead, mentor, and develop incident response analysts.<br> Conduct technical coaching, performance management, skills development initiatives, and incident response readiness activities.<br> Support recruitment and onboarding of new team members.<br> Drive continuous capability development across the incident response function.</p> <p><strong>Governance & stakeholder management</strong><br> Serve as the primary customer-facing lead during major incidents.<br> Provide executive briefings and incident status updates.<br> Support regulatory, compliance, and reporting obligations.<br> Ensure adherence to incident response policies, service level agreements, and NCSC operational requirements.</p> <p><strong>Program development & continuous improvement</strong><br> Develop and maintain incident response frameworks, playbooks, runbooks, and response procedures.<br> Lead tabletop exercises and simulation activities.<br> Conduct post-incident reviews and lessons learned sessions.<br> Drive improvements to organizational cyber resilience and response capabilities.</p> <h4>Our culture & code of conduct</h4> <p>At ZainTECH, we take pride in a culture built on collaboration, innovation, and uncompromising integrity. We are looking for individuals who share these values and are committed to customer-centricity and ethical excellence. All employees are expected to uphold our code of conduct, which serves as a guiding framework for responsible behavior across everything we do—from how we work with each other to how we engage with clients and partners globally.</p> <h4>Requirements</h4> <ul> <li>Bachelor's degree (minimum) in information technology or a related field.</li> <li>Minimum 5 years in cybersecurity/information security, including 3 or more years specifically in incident response.</li> <li>At least one valid NCSC-approved IR certification like ECIH, CCIM, Blue Team Level 2, or another equivalent certification in the same field that is approved by the NCSC.</li> <li>Technical command: hands-on expertise in incident triage, forensics-aware investigation, containment, and recovery across endpoint, network, and cloud.</li> <li>Leadership: proven ability to lead an analyst team under pressure and communicate clearly with clients and the NCSC.</li> <li>Advanced degree in cybersecurity or a related discipline is preferable.</li> <li>Additional credentials such as GCIH, GCFA, or vendor EDR/SOAR are preferable.</li> <li>Experience in an MSSP, telco-affiliated SOC, or national CERT/CSIRT environment is preferable.</li> </ul></p><p></p>

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> <span>The Incident Response Team Leader is responsible for leading cybersecurity incident response activities, managing complex investigations, and overseeing the delivery of incident response services across customer and enterprise environments.<br> The role provides technical leadership, operational oversight, and strategic direction for incident response engagements while ensuring effective coordination of resources during security incidents.<br> This role serves as the primary escalation point for major cybersecurity incidents and plays a key role in strengthening incident response readiness, improving operational maturity, and ensuring compliance with NCSC licensing requirements.<br> Responsibilities: Incident Response Leadership Lead cybersecurity incident response engagements from identification through recovery.<br> Direct technical response teams during Major security incidents, Ransomware attacks and Data breaches Coordinate containment, eradication, recovery, and remediation activities.<br> Act as the primary incident commander during major incidents.<br> Advanced Incident Investigation Oversee complex investigations involving Malware outbreaks, Insider threats, Targeted attacks and Data exfiltration incidents Validate investigation findings and response recommendations.<br> Provide technical leadership during high-severity incidents.<br> Support digital forensics activities where required.<br> Team Management &amp; Development Lead, mentor, and develop Incident Response Analysts.<br> Conduct Technical coaching, Performance management, Skills development initiatives and Incident response readiness activities Support recruitment and onboarding of new team members.<br> Drive continuous capability development across the incident response function.<br> Governance &amp; Stakeholder Management Serve as the primary customer-facing lead during major incidents.<br> Provide executive briefings and incident status updates.<br> Support regulatory, compliance, and reporting obligations.<br> Ensure adherence to Incident response policies, Service level agreements and NCSC operational requirements Program Development &amp; Continuous Improvement Develop and maintain Incident response frameworks, Playbooks, Runbooks and Response procedures Lead tabletop exercises and simulation activities.<br> Conduct post-incident reviews and lessons learned sessions.<br> Drive improvements to organizational cyber resilience and response capabilities.<br> Our Culture &amp; Code of Conduct: At ZainTECH, we take pride in a culture built on collaboration, innovation, and uncompromising integrity.<br> We are looking for individuals who share these values and are committed to customer-centricity and ethical excellence.<br> All employees are expected to uphold our Code of Conduct, which serves as a guiding framework for responsible behavior across everything we do — from how we work with each other to how we engage with clients and partners globally.<br> Bachelor's degree (minimum) in information technology or a related field.<br> Minimum 5 years in cybersecurity / information security, including 3 or more years specifically in incident response.<br> At least one valid NCSC-approved IR certification like (ECIH , CCIM, or Blue Team Level 2, or another equivalent certification in the same field that is approved by the NCSC.<br> Technical command.<br> Hands-on expertise in incident triage, forensics-aware investigation, containment, and recovery across endpoint, network, and cloud.<br> Leadership.<br> Proven ability to lead an analyst team under pressure and communicate clearly with clients and the NCSC.<br> Advanced degree in cybersecurity or a related discipline is preferable.<br> Additional credentials such as GCIH, GCFA, or vendor EDR/SOAR is preferable.<br> Experience in an MSSP, telco-affiliated SOC, or national CERT/CSIRT environment is preferable.<br></span> </div>

<section><p class="heading jdMain">Job Description</p><p class="heading">Roles &amp; Responsibilities</p><div class="paragraph"><p>Overview Working across the globe, V2X builds smart solutions designed to integrate physical and digital infrastructure from base to battlefield. We bring 120 years of successful mission support to improve security, streamline logistics, and enhance readiness. Aligned around a shared purpose, our $3.9B company and 16,000 people work alongside our clients, here and abroad, to tackle their most complex challenges with integrity, respect, responsibility, and professionalism. The SharePoint Administrator/Developer will provide enterprise-level SharePoint administration, development, and customer support to military and civilian users. This role requires expertise in SharePoint infrastructure design, deployment, customization, and maintenance to ensure optimal system performance and user experience. The administrator will be responsible for gathering business requirements, designing tailored SharePoint solutions, and implementing best practices for collaboration, document management, automation, and security. This position demands strong skills in SharePoint Online, SharePoint 2019, Power Platform (Power Automate, Power Apps, Power BI), and Microsoft 365 integration to enhance operational efficiency. The candidate will work closely with stakeholders to analyze business needs, develop scalable solutions, and ensure compliance with enterprise security policies and military standards. Program: OMDAC-SWACA This position offers company-paid housing and transportation, a completion bonus and tuition reimbursement program! You must satisfy all host country requirements to legally work in the host country to include but not limited to the ability to obtain and maintain a host nation visa and host nation driver s license in order to be qualified for this position.</p> <p>Responsibilities</p> <ul> <li>Administer and configure Microsoft SharePoint 2019 and SharePoint Online at an enterprise level.</li> <li>Manage SharePoint Enterprise Search, including index configurations and scheduling.</li> <li>Plan, install, and maintain service packs, hotfixes, updates, and patches in a multi-server SharePoint environment during off-peak hours.</li> <li>Utilize tools such as Event Viewer, ULS logs, Power BI, and Microsoft Graph API for troubleshooting and performance monitoring.</li> <li>Implement Microsoft 365 integration, including Teams, OneDrive, and Power Platform (Power Apps, Power Automate, and Power BI).</li> <li>Develop and maintain high-level technical and engineering documentation.</li> <li>Act as the SharePoint subject matter expert, providing training and end-user support.</li> <li>Demonstrate expertise in modern web development technologies, including SPFx (SharePoint Framework), React, TypeScript, PnP (Patterns and Practices), and the Client-Side Object Model (CSOM).</li> <li>Customize SharePoint Online and SharePoint 2019 sites using modern design templates, JSON formatting, and adaptive cards.</li> <li>Develop, automate, and manage workflows using Power Automate (Flow) and Microsoft Forms.</li> <li>Ensure compliance with Zero Trust Security models, Microsoft Security &amp; Compliance Center policies, and Information Assurance (IA) standards.</li> <li>Apply Security Technical Implementation Guidelines (STIGs) for governance and security.</li> <li>Troubleshoot site-related issues, manage user permissions, and assist with site creation and configuration.</li> <li>Automate SharePoint administration tasks using PowerShell and Microsoft Graph API.</li> <li>Assist database administrators with configuring and monitoring SQL Server databases supporting.</li> <li>Performs other duties and assignments as required.</li> </ul> <p>Qualifications</p> <ul> <li>Security Clearance: Requires an active Secret Clearance</li> <li>Education / Certifications: One year of related academic study above the high school level may be substituted for one year of experience up to a maximum of a 4-year bachelor's degree in a Software Engineering or Business Information Systems discipline for three years general experience. Associate Degree or equivalent experience preferably in Computer Science or MIS, IS, Engineering or related field. This position requires candidates to adhere to DoD 8570.01. All candidates are required to maintain at least one (1) baseline certification and one (1) computing environment (CE) certification. Baseline certifications cannot also be used as a Computing Environment (CE) certification. The authorized certifications for this job title are listed as follows: BASELINE: Cisco: CCNA: Certified Network Associate - Security Cisco: CCNP: Certified Network Professional - Security CompTIA: CASP+ ce: Advanced Security Practitioner CompTIA: Security+ ce CompTIA: SecurityX ce GIAC: GCED: Certified Enterprise Defender GIAC: GCIH: Certified Incident Handler GIAC: GICSP: Industrial Cyber Security Professional GIAC: GSEC: Security Essentials ISC2: CISSP ( or Associate ): Certified Information Systems Security Professional COMPUTING ENVIRONMENT (CE): Microsoft: 365 Certified: Enterprise Administrator Expert Microsoft: Certified: Azure Database Administrator Associate Microsoft: Certified: Azure Security Engineer Associate Microsoft: Certified: Azure Solutions Architect Expert Microsoft: MCA: Certified Architect (Any) Microsoft: MCITP: Database Administrator 2008 Microsoft: MCITP: Database Developer 2008 Microsoft: MCITP: Enterprise Administrator Microsoft: MCITP: SharePoint Administrator 2010 (Technical III for SharePoint Admin only) Microsoft: MCSA: Certified Solutions Associate: SQL Server 2012 Microsoft: MCSA: SQL 2016 Database Admin Microsoft: MCSA: SQL 2016 Database BI Development Microsoft: MCSA: SQL 2016 Database Dev Microsoft: MCSA: Windows Server 2008/2012/2016 Microsoft: MCSD: Microsoft Certified Solutions Developer (Any) Microsoft: MCSE: Core Infrastructure Microsoft: MCSE: Data Management and Analytics Microsoft: MCSE: Productivity Solutions Expert</li> </ul></div></section><section><p class="heading">Desired Candidate Profile</p><p class="paragraph"></p><ul> <li>Security Clearance: Requires an active Secret Clearance</li> <li>Education / Certifications: One year of related academic study above the high school level may be substituted for one year of experience up to a maximum of a 4-year bachelor's degree in a Software Engineering or Business Information Systems discipline for three years general experience. Associate Degree or equivalent experience preferably in Computer Science or MIS, IS, Engineering or related field. This position requires candidates to adhere to DoD 8570.01. All candidates are required to maintain at least one (1) baseline certification and one (1) computing environment (CE) certification. Baseline certifications cannot also be used as a Computing Environment (CE) certification. The authorized certifications for this job title are listed as follows: BASELINE: Cisco: CCNA: Certified Network Associate - Security Cisco: CCNP: Certified Network Professional - Security CompTIA: CASP+ ce: Advanced Security Practitioner CompTIA: Security+ ce CompTIA: SecurityX ce GIAC: GCED: Certified Enterprise Defender GIAC: GCIH: Certified Incident Handler GIAC: GICSP: Industrial Cyber Security Professional GIAC: GSEC: Security Essentials ISC2: CISSP ( or Associate ): Certified Information Systems Security Professional COMPUTING ENVIRONMENT (CE): Microsoft: 365 Certified: Enterprise Administrator Expert Microsoft: Certified: Azure Database Administrator Associate Microsoft: Certified: Azure Security Engineer Associate Microsoft: Certified: Azure Solutions Architect Expert Microsoft: MCA: Certified Architect (Any) Microsoft: MCITP: Database Administrator 2008 Microsoft: MCITP: Database Developer 2008 Microsoft: MCITP: Enterprise Administrator Microsoft: MCITP: SharePoint Administrator 2010 (Technical III for SharePoint Admin only) Microsoft: MCSA: Certified Solutions Associate: SQL Server 2012 Microsoft: MCSA: SQL 2016 Database Admin Microsoft: MCSA: SQL 2016 Database BI Development Microsoft: MCSA: SQL 2016 Database Dev Microsoft: MCSA: Windows Server 2008/2012/2016 Microsoft: MCSD: Microsoft Certified Solutions Developer (Any) Microsoft: MCSE: Core Infrastructure Microsoft: MCSE: Data Management and Analytics Microsoft: MCSE: Productivity Solutions Expert</li> <li>Experience: One year of related academic study above the high school level may be substituted for one year of experience up to a maximum of a 4-year bachelor's degree in a Software Engineering or Business Information Systems discipline for three years general experience. At least five years of hands-on experience with Windows Server administration and Active Directory management, with a strong understanding of security principles, access controls, and compliance best practices in an enterprise environment. Expert proficiency in web design and development, including HTML5, CSS3, JavaScript, and modern SharePoint Framework (SPFx), React, and TypeScript. Proven ability to develop, deploy, and manage SharePoint web parts, lists, libraries, and workflows while designing, maintaining, and administering SharePoint portals. Strong documentation skills with the ability to create technical documentation, user guides, and training materials, along with the capability to interact with key stakeholders, gather business requirements, and translate them into effective SharePoint solutions. Experience working with Infrastructure, Web Servers (IIS), SharePoint Administration, and Microsoft 365 integration, as well as knowledge of Power Platform (Power Automate, Power Apps, Power BI) for workflow automation and business process optimization. Experience with a customer service-oriented company.</li> <li>Skills &amp; Technology Used: Ability to Administer and configure Microsoft SharePoint 2019 and SharePoint Online at an enterprise level. Manage SharePoint Enterprise Search, including index configurations and scheduling. Ability to Plan, install, and maintain service packs, hotfixes, updates, and patches in a multi-server SharePoint environment during off-peak hours. Ability to Utilize tools such as Event Viewer, ULS logs, Power BI, and Microsoft Graph API for troubleshooting and performance monitoring. Ability to Implement Microsoft 365 integration, including Teams, OneDrive, and Power Platform (Power Apps, Power Automate, and Power BI). Develop and maintain high-level technical and engineering documentation. Act as the SharePoint subject matter expert, providing training and end-user support. Demonstrate expertise in modern web development technologies, including SPFx (SharePoint Framework), React, TypeScript, PnP (Patterns and Practices), and the Client-Side Object Model (CSOM).Demonstrate expertise in modern web development technologies, including: SPFx (SharePoint Framework) React TypeScript PnP (Patterns and Practices) Client-Side Object Model (CSOM)</li> </ul><p></p></section>

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> <span>The Penetration Testing Team Leader is responsible for leading ZainTECH’s licensed penetration testing capability within the Cybersecurity Advisory Services practice.<br> The role oversees the delivery of offensive security engagements across enterprise, government, and critical infrastructure customers throughout the MENA region, ensuring all testing activities are performed in accordance with industry best practices, recognized testing methodologies, and NCSC Jordan licensing requirements.<br> The role combines hands-on technical leadership with team management, customer engagement, and service governance responsibilities.<br> Also responsible for managing penetration testing engagements, developing offensive security capabilities, assuring quality of deliverables, and strengthening customer security postures through actionable remediation guidance.<br> Responsibilities: Penetration Testing Engagement Leadership Lead and manage penetration testing engagements across infrastructure, web, wireless and applications to a recognized methodology.<br> Define engagement scope, objectives, testing methodology, and rules of engagement.<br> Ensure all testing activities are conducted safely and within approved customer authorizations.<br> Manage engagement timelines, resources, and delivery quality.<br> Act as the primary technical lead throughout the penetration testing lifecycle.<br> Offensive Security Delivery Perform advanced penetration testing activities using both manual and automated testing techniques.<br> Identify, validate, and demonstrate security vulnerabilities and attack paths.<br> Assess exploitability, business impact, and risk exposure associated with identified findings.<br> Conduct Vulnerability assessments, Penetration testing, Security validation exercises, Configuration reviews and Red Team-style activities where applicable Support retesting activities following remediation efforts.<br> Quality Assurance &amp; Technical Review Review and validate penetration testing findings prior to customer delivery.<br> Ensure reports are Technically accurate, Risk-rated appropriately, Actionable and business-focused and Aligned with industry standards Review attack chains and exploitation methodologies to ensure consistency and quality.<br> Maintain testing methodologies aligned with OWASP Testing Guide, PTES, OSSTMM, NIST guidance and Industry best practices Customer Engagement &amp; Advisory Services Present technical findings and executive summaries to customer stakeholders.<br> Conduct remediation workshops and technical review sessions.<br> Support customers in understanding Security risks, Threat exposure and Recommended remediation activities Provide strategic guidance on improving overall security posture.<br> Support presales activities, customer workshops, and cybersecurity assessments where required.<br> Team Leadership &amp; Capability Development Lead, mentor, and develop penetration testers within the Cybersecurity Practice.<br> Conduct Technical coaching, Skills development programs, Knowledge-sharing sessions and Offensive security training initiatives Support recruitment, onboarding, and capability development activities.<br> Ensure team certifications remain current and aligned with NCSC requirements.<br> Drive continuous improvement across offensive security methodologies and tooling.<br> Governance, Compliance &amp; Service Development Ensure compliance with NCSC Jordan licensing requirements, Internal security policies, Customer contractual obligations and Regulatory requirements Enforce secure testing practices, confidentiality requirements, and evidence handling procedures.<br> Support service development initiatives to expand ZainTECH’s offensive security capabilities.<br> Maintain operational documentation, testing standards, and quality assurance processes.<br> Coordinate reporting and compliance activities required by NCSC and other regulatory stakeholders.<br> Our Culture &amp; Code of Conduct: At ZainTECH, we take pride in a culture built on collaboration, innovation, and uncompromising integrity.<br> We are looking for individuals who share these values and are committed to customer-centricity and ethical excellence.<br> All employees are expected to uphold our Code of Conduct, which serves as a guiding framework for responsible behavior across everything we do — from how we work with each other to how we engage with clients and partners globally.<br> Bachelor's degree (minimum) in information technology or a related field.<br> Minimum 5 years experience in cybersecurity, including at least 5 completed penetration testing projects.<br> At least one valid NCSC-approved penetration testing certification like (CPENT, CEPT, OSCE, LPT, CPT, GPEN), or another internationally recognized, equivalent certification in the same field that is approved by the NCSC and published on its official website.<br>. Deep, hands-on offensive skills across network, web, wireless, and application testing, and command of recognized methodologies (OWASP, PTES, OSSTMM).<br> Leadership.<br> Proven ability to lead a testing team and present to client executives.<br> Advanced degree in cybersecurity or a related discipline is preferable.<br> Advanced credentials such as OSCE, CPENT, LPT, or GPEN is preferable.<br> Experience in red teaming or an MSSP/consultancy offensive practice is preferable.<br></span> </div>

<p><h4>Description</h4> <p>The SOC analyst - tier 1 is responsible for providing 24x7 security monitoring, alert triage, event analysis, and incident escalation services within ZainTECH’s managed security operations center (SOC). As the first line of defense against cybersecurity threats, the role continuously monitors customer environments, validates security events, and ensures potential security incidents are identified, classified, documented, and escalated in accordance with established procedures and service level agreements.</p> <h4>Responsibilities:</h4> <p><strong>Security monitoring & event analysis</strong></p> <ul> <li>Provide continuous 24x7 monitoring of customer and enterprise security environments through shift-based operations.</li> <li>Monitor and analyze security events generated from SIEM platforms, IDS/IPS solutions, endpoint detection & response (EDR) tools, firewalls, email security gateways, web security solutions, and cloud security platforms.</li> <li>Review and assess security alerts to determine whether activity represents a legitimate security threat or a false positive.</li> <li>Perform initial event validation, classification, and prioritization based on severity, risk, and potential business impact.</li> <li>Identify suspicious behavior, indicators of compromise (IOCs), and anomalous activities requiring further investigation.</li> </ul> <p><strong>Incident triage & escalation</strong></p> <ul> <li>Perform first-level analysis and triage of security alerts and events.</li> <li>Create and manage incident tickets within approved incident management platforms.</li> <li>Categorize incidents based on severity, impact, urgency, and threat classification.</li> <li>Escalate validated incidents to SOC analyst - tier 2 teams in accordance with approved escalation procedures.</li> <li>Ensure escalations include complete and accurate investigation details to support efficient handover and further analysis.</li> <li>Maintain incident tracking and ensure timely updates throughout the incident lifecycle.</li> </ul> <p><strong>SIEM operations & security monitoring</strong></p> <ul> <li>Utilize SIEM platforms to monitor security events, review alerts, execute predefined searches and queries, support basic investigations.</li> <li>Support operational activities including alert validation, monitoring dashboard review, log analysis, and security event correlation.</li> <li>Assist with identifying false positives and escalating tuning recommendations where required.</li> <li>Support the overall effectiveness and reliability of monitoring operations.</li> </ul> <p><strong>Documentation & reporting</strong></p> <ul> <li>Maintain accurate records of investigations, observations, and escalation activities.</li> <li>Document security incidents and monitoring activities in accordance with operational procedures.</li> <li>Participate in shift handovers and ensure continuity of investigations between teams.</li> <li>Support operational reporting and SOC performance metrics activities.</li> </ul> <p><strong>Governance, compliance & operational excellence</strong></p> <ul> <li>Follow approved SOC procedures, playbooks, and operational standards.</li> <li>Ensure compliance with internal security policies, customer contractual obligations, and NCSC Jordan licensing requirements.</li> <li>Handle customer information with strict confidentiality and professionalism.</li> <li>Participate in training, simulation exercises, and continuous improvement initiatives.</li> <li>Maintain awareness of emerging cybersecurity threats and attack techniques.</li> </ul> <h4>Our culture & code of conduct:</h4> <p>At ZainTECH, we take pride in a culture built on collaboration, innovation, and uncompromising integrity. We are looking for individuals who share these values and are committed to customer-centricity and ethical excellence. All employees are expected to uphold our code of conduct, which serves as a guiding framework for responsible behavior across everything we do — from how we work with each other to how we engage with clients and partners globally.</p> <h4>Requirements</h4> <ul> <li>Bachelor's degree or intermediate diploma from a recognised institution.</li> <li>At least 6 months of practical cybersecurity experience.</li> <li>At least one valid NCSC-approved SOC certification like CSA, GSOC, GCIA, CTIA, Blue Team Level 1, or Cisco CyberOps Associate, or another internationally recognised, equivalent certification in the same field that is approved by the NCSC.</li> <li>Familiarity with SIEM consoles, alert triage, and SOC monitoring workflow; willingness to work rotating shifts.</li> <li>Foundational networking and operating-system knowledge is preferable.</li> <li>Prior internship or junior SOC experience is preferable.</li> </ul></p><p></p>

<p><h4>Description</h4> <p>The digital forensics analyst is responsible for conducting forensic investigations, evidence acquisition, preservation, analysis, and reporting activities in support of cybersecurity incidents, legal investigations, regulatory requirements, and internal security matters. The role plays a critical part in identifying the source, scope, and impact of cyber incidents while ensuring the integrity and admissibility of digital evidence.</p> <p>The role works closely with incident response teams, security operations, legal stakeholders, and customer representatives to investigate cyber incidents, collect forensic evidence, and provide technical findings that support decision-making, remediation, and potential legal proceedings.</p> <h4>Responsibilities</h4> <p><strong>Digital evidence acquisition & preservation</strong><br> Perform forensic acquisition of digital evidence from workstations, servers, mobile devices, virtual environments, cloud platforms, and removable media.<br> Ensure proper chain of custody procedures are followed throughout investigations.<br> Preserve evidence integrity using approved forensic methodologies and tools.<br> Conduct live and dead-box forensic acquisitions.<br> Maintain forensic evidence repositories and documentation.</p> <p><strong>Forensic investigation & analysis</strong><br> Analyze digital evidence to identify unauthorized access, data theft, insider threats, malware activity, data destruction attempts, and policy violations.<br> Examine file systems, registry artifacts, event logs, browser artifacts, user activity records, and network evidence.<br> Conduct timeline analysis and event reconstruction activities.<br> Support attribution efforts and attack path analysis where applicable.</p> <p><strong>Reporting & documentation</strong><br> Prepare detailed forensic reports documenting the methodology, findings, evidence collected, and conclusions.<br> Present findings to technical and non-technical stakeholders.<br> Maintain investigation records in accordance with regulatory and legal requirements.<br> Support expert witness preparation activities where required.</p> <p><strong>Research & continuous improvement</strong><br> Maintain awareness of emerging attack techniques, anti-forensics methodologies, and digital investigation trends.<br> Support the development of investigation procedures, forensic methodologies, and evidence handling standards.<br> Participate in technical training and capability development initiatives.</p> <h4>Our culture & code of conduct</h4> <p>At ZainTECH, we take pride in a culture built on collaboration, innovation, and uncompromising integrity. We are looking for individuals who share these values and are committed to customer-centricity and ethical excellence. All employees are expected to uphold our code of conduct, which serves as a guiding framework for responsible behavior across everything we do—from how we work with each other to how we engage with clients and partners globally.</p> <h4>Requirements</h4> <ul> <li>Bachelor's degree or intermediate diploma (minimum) from a recognised institution.</li> <li>Minimum 2 years experience in cybersecurity, including at least 2 completed digital forensic investigations.</li> <li>At least one valid NCSC-approved forensics certification like GCFE, GCFA, CHFI, or another equivalent certification in the same field that is approved by the NCSC.</li> <li>Hands-on use of forensic tools and sound evidence-handling practice.</li> <li>Exposure to mobile and cloud forensics is preferable.</li> <li>Experience in an MSSP, lab, or law-enforcement forensic environment is preferable.</li> </ul></p><p></p>

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> <span>Job Summary: We are seeking an experienced SIEM Deployment Engineer to lead or support the deployment, configuration, and optimization of Splunk or SIEM solutions across enterprise environments.<br> The ideal candidate will possess strong technical knowledge in security operations, log management, and compliance, along with hands-on experience in implementing for clients.<br> Key Responsibilities: Lead end-to-end deployment of Splunk or SIEM platform, including planning, architecture design, installation, configuration, and tuning.<br> Integrate log sources from various platforms (Windows, Linux, firewalls, routers, endpoint protection, etc.<br>). Develop custom parsers and log normalization rules.<br> Build correlation rules, alerts, dashboards, and reports based on customer requirements.<br> Conduct use case development, threat detection tuning, and optimization of false positives.<br> Collaborate with SOC teams to ensure effective threat monitoring and incident detection.<br> Document implementation procedures, configuration guides, and troubleshooting steps.<br> Provide knowledge transfer and training to internal teams or clients.<br> Ensure compliance with industry standards (e.<br>g., NCA ECC, SAMA CSF, ISO 27001).<br> Required Skills and Qualifications: Bachelor’s degree in Computer Science, Cybersecurity, or related field.<br> 8-10 years of experience in Splunk or SIEM deployment and cybersecurity.<br> Proven experience with LogRhythm SIEM deployment in enterprise environments.<br> Strong understanding of log analysis, incident response, and threat detection.<br> Familiarity with log source integration: Windows Event Logs, Syslog, NetFlow, etc.<br> Scripting experience (PowerShell, Python, etc.<br>) is a plus.<br> Knowledge of cybersecurity frameworks (MITRE ATT&amp;CK, NIST, etc.<br>) is an advantage.<br> LogRhythm certifications (e.<br>g., LogRhythm Deployment Fundamentals, LogRhythm Analyst) are a strong plus.<br></span> </div>

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> <span>The Digital Forensics Analyst is responsible for conducting forensic investigations, evidence acquisition, preservation, analysis, and reporting activities in support of cybersecurity incidents, legal investigations, regulatory requirements, and internal security matters.<br> The role plays a critical part in identifying the source, scope, and impact of cyber incidents while ensuring the integrity and admissibility of digital evidence.<br> The role works closely with Incident Response teams, Security Operations, Legal stakeholders, and customer representatives to investigate cyber incidents, collect forensic evidence, and provide technical findings that support decision-making, remediation, and potential legal proceedings.<br> Responsibilities: Digital Evidence Acquisition &amp; Preservation Perform forensic acquisition of digital evidence from Workstations, Servers, Mobile devices, Virtual environments, Cloud platforms and Removable media Ensure proper chain of custody procedures are followed throughout investigations.<br> Preserve evidence integrity using approved forensic methodologies and tools.<br> Conduct live and dead-box forensic acquisitions.<br> Maintain forensic evidence repositories and documentation.<br> Forensic Investigation &amp; Analysis Analyze digital evidence to identify Unauthorized access ,Data theft , Insider threats ,Malware activity ,Data destruction attempts and Policy violations Examine File systems ,Registry artifacts ,Event logs ,Browser artifacts ,User activity records and Network evidence Conduct timeline analysis and event reconstruction activities.<br> Support attribution efforts and attack path analysis where applicable.<br> Reporting &amp; Documentation Prepare detailed forensic reports documenting the Methodology, Findings, Evidence collected and Conclusions Present findings to technical and non-technical stakeholders.<br> Maintain investigation records in accordance with regulatory and legal requirements.<br> Support expert witness preparation activities where required.<br> Research &amp; Continuous Improvement Maintain awareness of Emerging attack techniques, Anti-forensics methodologies, Digital investigation trends and Digital investigation trends Support the development of Investigation procedures, Forensic methodologies and Evidence handling standards Participate in technical training and capability development initiatives.<br> Our Culture &amp; Code of Conduct: At ZainTECH, we take pride in a culture built on collaboration, innovation, and uncompromising integrity.<br> We are looking for individuals who share these values and are committed to customer-centricity and ethical excellence.<br> All employees are expected to uphold our Code of Conduct, which serves as a guiding framework for responsible behavior across everything we do — from how we work with each other to how we engage with clients and partners globally.<br> Bachelor's degree or intermediate diploma (minimum) from a recognised institution.<br> Minimum 2 years experience in cybersecurity, including at least 2 completed digital forensic investigations.<br> At least one valid NCSC-approved forensics certification like (GCFE, GCFA, CHFI), or another equivalent certification in the same field that is approved by the NCSC) Hands-on use of forensic tools and sound evidence-handling practice.<br> Exposure to mobile and cloud forensics is preferable.<br> Experience in an MSSP, lab, or law-enforcement forensic environment is preferable.<br></span> </div>

<section><p class="heading jdMain">Job Description</p><p class="heading">Roles &amp; Responsibilities</p><div class="paragraph"><p>At EY, we re all in to shape your future with confidence.</p><p>We ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.</p><p>Join EY and help to build a better working world.</p><p>The opportunity</p><p>To support the significant growth of our Technology Risk service in MENA, EY is looking to hire highly qualified resources. Specifically, as part of this job posting, we are looking for a Senior Consultant. Working across many different industries, this role will be responsible for executing and leading IT and cybersecurity projects. It is all about listening to our clients, asking the better questions, and supporting them in areas where there are no off-the-shelf solutions.</p><p>Your key responsibilities</p><p>A large part of the role will be engagement delivery and EY will expect the candidates to lead and deliver engagements with very minimal supervision. EY also expects the candidates to support executives in development of proposals, presentations and other business development activities. The candidate will be responsible for the delivery and quality of the final reports to EY's clients.</p><p>An existing track record of successful engagement delivery in Technology Risk is expected of all candidates for this role. A Big 4 background or comparable consulting experience is highly advantageous. A broad background across IT and Cybersecurity is expected with specific experience in the following areas:</p><p>Expertise in Risk and Governance Frameworks, including IT governance frameworks (e.g., COBIT, ITIL, NIST), ISO 27001 standards, information security principles, policy development, and risk assessment.</p><p>Proficiency in IT Systems Audit, encompassing planning, execution, audit methodologies, complex IT environment evaluation, control weakness identification, and effective communication of findings.</p><p>Comprehensive knowledge of internal controls over financial reporting (ICFR), covering ITGCs, ITACs, SOX requirements, supporting financial audits with IT expertise, and strong liaison skills with financial auditors.</p><p>Good understanding around the application systems such as SAP, Oracle, Microsoft Dynamics and operating systems and databases.</p><p>Strong understanding of Business Continuity Planning (BCP), including BCP/DRP principles, business impact analyses, recovery strategy development, and plan testing.</p><p>Strong understanding of cybersecurity fundamentals, including common threats, vulnerabilities, basic principles, and contributions to cybersecurity discussions.</p><p>General Skills: Excellent analytical, problem-solving, communication, presentation, project management, organizational, leadership, client service, and business development skills.</p><p>Skills and attributes for success</p><p>What we offer you</p><p>At EY, we ll develop you with future-focused skills and equip you with world-class experiences. We ll empower you in a flexible environment, and fuel you and your extraordinary talents in a diverse and inclusive culture of globally connected teams. Learn more .</p><p>Are you ready to shape your future with confidence? Apply today.</p><p>To help create an equitable and inclusive experience during the recruitment process, please inform us as soon as possible about any disability-related adjustments or accommodations you may need.</p><p>EY | Building a better working world</p><p>EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.</p><p>Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.</p><p>EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.</p></div></section><section><p class="heading">Desired Candidate Profile</p><p class="paragraph"></p><p>Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or in a related field.</p><p>Relevant professional certifications (e.g., CISA, CISSP, CISM, ISO 27001 Lead Auditor) are preferred.</p><p>Minimum of 3 to 5 years of experience in IT audit, information security, or related fields.</p><p>Strong knowledge of ITGC/ITAC, information security frameworks, and cybersecurity best practices.</p><p>Excellent analytical, problem-solving, and communication skills.</p><p>Ability to work independently and collaboratively within a team environment.</p><p></p></section>

<section><p class="heading jdMain">Job Description</p><p class="heading">Roles &amp; Responsibilities</p><div class="paragraph"><p>Proactively manages the service desk operations and supervises the ADPE Technicians I in the performance of their duties. Provides professional laptop and desktop support as well as customer service to military and civilian customers. Work involves troubleshooting hardware problems and repairing or referring to another repair facility as appropriate. Installs, troubleshoots, configures and repairs software issues for Windows operating systems (OS) and Microsoft Office 2007. Troubleshoots and resolves network connectivity issues at the desktop level. Join personal computers (PCs) to local domains as required. Configures local PC connections to network printers. Performs custom transmission control protocol, internet protocol (TCP/IP) configurations of desktops as required. Troubleshoots Microsoft Exchange Server connectivity issues. Installs and troubleshoots other software and peripheral devices as required by the customer. Trains ADPE technicians on how to baseline systems and troubleshoot computers on the network.Performs other Service Desk functions as required. Program: OMDAC-SWACA This position offers company-paid housing and transportation, a completion bonus and tuition reimbursement program! You must satisfy all host country requirements to legally work in the host country to include but not limited to the ability to obtain and maintain a host nation visa and host nation driver s license in order to be qualified for this position.</p></div></section><section><p class="heading">Desired Candidate Profile</p><p class="paragraph"></p><h2>Qualifications:</h2><p>Security Clearance: Requires an active Secret Clearance</p><p>Education / Certifications: One year of related experience may be substituted for one year of education if degree is required. Degree in Information Technology (IT) or a related field is preferred. This position requires candidates to adhere to DoD 8570.01M. All candidates are required to maintain at least one (1) baseline certification and one (1) computing environment (CE) certification. Baseline certifications cannot also be used as a Computing Environment (CE) certification. The authorized certifications for this job title are listed as follows:</p><p>BASELINE:</p><ul><li>Cisco: CCNA: Certified Network Associate - Security</li><li>Cisco: CCNP: Certified Network Professional - Security</li><li>CompTIA: A+ ce</li><li>CompTIA: CASP+ ce: Advanced Security Practitioner (ended 17 Dec 2024)</li><li>CompTIA: CySA+ ce: Cybersecurity Analyst</li><li>CompTIA: Network+ ce</li><li>CompTIA: Security+ ce</li><li>CompTIA: SecurityX ce</li><li>GIAC: GCED: Certified Enterprise Defender</li><li>GIAC: GCIH: Certified Incident Handler: Certified Incident Handler</li><li>GIAC: GICSP: Industrial Cyber Security Professional</li><li>GIAC: GSEC: Security Essentials</li><li>ISACA: CISA: Certified Information Systems Auditor</li><li>ISC2: CISSP (or Associate): Certified Information Systems Security Professional</li><li>ISC2: SSCP: Systems Security Certified Practitioner</li></ul><p>COMPUTING ENVIRONMENT (CE):</p><ul><li>CompTIA: Server+</li><li>Microsoft: 365 Certified: Endpoint Administrator Associate</li><li>Microsoft: 365 Certified: Enterprise Administrator Expert</li><li>Microsoft: 365 Certified: Messaging Administrator Associate</li><li>Microsoft: 365 Certified: Modern Desktop Administrator Associate</li><li>Microsoft: 365 Certified: Modern Desktop Administrator Associate</li><li>Microsoft: 365 Certified: Security Administrator Associate</li><li>Microsoft: Certified: Azure Administrator Associate</li><li>Microsoft: Certified: Azure Database Administrator Associate</li><li>Microsoft: Certified: Azure Security Engineer Associate</li><li>Microsoft: Certified: Azure Solutions Architect Expert</li><li>Microsoft: Certified: Identity and Access Administrator Associate</li><li>Microsoft: Certified: Information Protection Administrator Associate</li><li>Microsoft: Certified: Security Operations Analyst Associate</li><li>Microsoft: MCSA: SQL 2016 Database Admin</li><li>Microsoft: MCSA: SQL 2016 Database BI Development</li><li>Microsoft: MCSA: SQL 2016 Database Dev</li><li>Microsoft: MCSA: Windows 10</li><li>Microsoft: MCSA: Windows Server 2012</li><li>Microsoft: MCSA: Windows Server 2016</li><li>Microsoft: MCSE: Cloud Platform and Infrastructure</li><li>Microsoft: MCSE: Core Infrastructure</li><li>Microsoft: MCSE: Database Management and Analytics</li><li>Microsoft: MCSE: Enterprise Devices and Apps</li><li>Microsoft: MCSE: Private Cloud 2012</li><li>Microsoft: MCSE: Productivity Solutions Expert</li><li>Microsoft: MCSE: Server Infrastructure 2012</li><li>Microsoft: MCT: Certified IT Professional</li><li>Microsoft: MCT: Certified Systems Administrator</li><li>Microsoft: MD-100: Windows Client</li><li>Microsoft: MTA: Microsoft Technology Associate</li><li>Microsoft: MTA: Windows Server Administration Fundamentals</li></ul><p>Experience: One year of related academic study above the high school level may be substituted for one year of experience up to a maximum of a 4-year bachelor's degree. The ADPE/Service Desk Administrator II is required to be an expert in all functions IAT Level I positions relating to a Windows Server operating system environment. The ADPE/Service Desk Administrator must be able to apply extensive knowledge of a variety of the IA field s concepts, practices, and procedures to ensure the secure integration and operation of all enclaves (NIPR, SIPR, etc.) systems. Must be able to rely on extensive experience and judgment to plan and accomplish goals for the enclave environment. At least two years of supervisory or lead experience is preferred. Experience with a customer service-oriented company.</p><p></p></section>

<section><p class="heading jdMain">Job Description</p><p class="heading">Roles &amp; Responsibilities</p><div class="paragraph"><p>Working across the globe, V2X builds smart solutions designed to integrate physical and digital infrastructure from base to battlefield. We bring 120 years of successful mission support to improve security, streamline logistics, and enhance readiness. Aligned around a shared purpose, our $3.9B company and 16,000 people work alongside our clients, here and abroad, to tackle their most complex challenges with integrity, respect, responsibility, and professionalism. Network Administrators work in a team environment on routine maintenance tasks as well as providing customers with solutions to more complex issues. Network Administrators (NA) troubleshoot network problems, outages, and anomalies as required. This includes the gathering of all pertinent information about the problem and knowing which related work centers or sites should be involved. Knowledge of sub-netting, switching and Cisco IOS is essential. NAs have a background and are knowledgeable in network security procedures and are responsible for reporting all pertinent information about any anomalies on the network. NOC Network Administrators are responsible for troubleshooting issues that cannot be solved by site Network Administrator II and must be able to aid the sites in additional troubleshooting or escalation as needed. Program: OMDAC-SWACA This position offers company-paid housing and transportation, a completion bonus and tuition reimbursement program! You must satisfy all host country requirements to legally work in the host country to include but not limited to the ability to obtain and maintain a host nation visa and host nation driver s license in order to be qualified for this position.</p><p>Responsibilities</p><ul><li>Individuals will be responsible for overseeing maintenance and operations of VoIP phones, switches, wired and wireless routers and encryption devices.</li><li>Monitor availability and reliability of LAN/WAN and Wireless Networks.</li><li>Troubleshoots LAN/WAN connectivity.</li><li>Provide technical support for VoIP networks.</li><li>Resolve customer interface/user issues.</li><li>VLAN administrator</li><li>ACL configuration</li><li>Use Spectrum and other software application tools to manage and administer the network.</li><li>Plan network development and expansion as needed.</li><li>Knowledge of sub-netting, switching and Cisco IOS and train new NA I personnel.</li><li>Enforces network security procedures, to include DISA STIG Compliance and best security practices.</li><li>(NOC) Ensure outages and corrective actions are reported to the NOC service desk and NOC Watch Officer as well as provide updates and clarification as to concerns with the outages.</li><li>Performs other duties and assignments as required.</li></ul></div></section><section><p class="heading">Desired Candidate Profile</p><p class="paragraph"></p><ul><li>Requires an active Secret Clearance</li><li>One-year related experience may be substituted for one year of education if degree is required.</li><li>Associate Degree in Information Technology (IT) or a related field is preferred.</li><li>This position requires candidates to adhere to DoD 8570.01M. All candidates are required to maintain at least one (1) baseline certification and one (1) computing environment (CE) certification. Baseline certifications cannot also be used as a Computing Environment (CE) certification.</li><li>The authorized certifications for this job title are listed as follows:<ul><li>BASELINE : Cisco: CCNA: Certified Network Associate - Security ( Cannot be used as a dual qualifier )</li><li>Cisco: CCNP: Certified Network Professional - Security ( Cannot be used as a dual qualifier )</li><li>CompTIA: CASP+ ce: Advanced Security Practitioner</li><li>CompTIA: CySA+ ce: Cybersecurity Analyst</li><li>CompTIA: Security+ ce</li><li>CompTIA: SecurityX ce</li><li>GIAC: GCED: Certified Enterprise Defender</li><li>GIAC: GCIH: Certified Incident Handler: Certified Incident Handler</li><li>GIAC: GICSP: Industrial Cyber Security Professional</li><li>GIAC: GSEC: Security Essentials</li><li>ISACA: CISA: Certified Information Systems Auditor</li><li>ISC2: CISSP ( or Associate ): Certified Information Systems Security Professional</li><li>ISC2: SSCP: Systems Security Certified Practitioner</li></ul><ul><li>COMPUTING ENVIRONMENT (CE):</li><li>Cisco: CC-DN-P: DevNet Professional</li><li>Cisco: CCIE: Certified Internetwork Expert - Collaboration</li><li>Cisco: CCIE: Certified Internetwork Expert - Enterprise Infrastructure</li><li>Cisco: CCIE: Certified Internetwork Expert - Enterprise Wireless</li><li>Cisco: CCIE: Certified Internetwork Expert - Routing &amp; Switching</li><li>Cisco: CCIE: Certified Internetwork Expert - Security</li><li>Cisco: CCIE: Certified Internetwork Expert - Service Provider</li><li>Cisco: CCNA: Certified Network Associate</li><li>Cisco: CCNA: Certified Network Associate - Routing and Switching</li><li>Cisco: CCNA: Certified Network Associate - Security ( Cannot be used as a dual qualifier )</li><li>Cisco: CCNA: Certified Network Associate: Service Provider</li><li>Cisco: CCNP: Certified Network Professional - Security ( Cannot be used as a dual qualifier )</li><li>Cisco: CCNP: Certified Network Professional - Collaboration</li><li>Cisco: CCNP: Certified Network Professional - Enterprise</li><li>Cisco: CCNP: Certified Network Professional - Routing &amp; Switching</li><li>Cisco: CCNP: Certified Network Professional - Service Provider</li></ul></li><li>One year of related academic study above the high school level may be substituted for one year of experience up to a maximum of a 4-year bachelor's degree.</li><li>Requires two (2) years of experience in a networking environment.</li><li>Experience with a customer service-oriented company.</li></ul><p></p></section>

<p><h4>Description</h4> <p>The digital forensics team leader is responsible for leading digital forensic investigations, managing forensic analysts, and overseeing the delivery of forensic services across customer and enterprise environments. The role provides technical leadership for complex investigations involving cyber incidents, fraud, insider threats, regulatory inquiries, and legal matters while ensuring evidence integrity and compliance with applicable standards.</p> <p>The role ensures forensic services are delivered in accordance with NCSC licensing requirements, industry best practices, and legal evidentiary standards.</p> <h4>Responsibilities</h4> <p><strong>Forensic investigation leadership</strong></p> <ul> <li>Lead complex digital forensic investigations involving cybersecurity incidents, data breaches, insider threats, fraud investigations, intellectual property theft, and regulatory investigations</li> <li>Direct evidence acquisition and analysis activities</li> <li>Review and validate forensic findings and conclusions</li> <li>Ensure investigations follow approved forensic methodologies and standards</li> </ul> <p><strong>Technical oversight & quality assurance</strong></p> <ul> <li>Provide technical leadership and guidance to digital forensics analysts</li> <li>Review forensic reports and evidence documentation</li> <li>Ensure forensic procedures maintain evidentiary integrity and legal defensibility</li> <li>Approve investigation methodologies and evidence collection approaches</li> <li>Support expert witness and legal support activities where required</li> </ul> <p><strong>Incident response & security investigation support</strong></p> <ul> <li>Support major incident investigations and breach response activities</li> <li>Coordinate forensic activities during ransomware incidents, data compromise events, and advanced threat investigations</li> <li>Assist with attribution analysis and attack reconstruction activities</li> </ul> <p><strong>Program development & continuous improvement</strong></p> <ul> <li>Develop and maintain forensic procedures, evidence handling standards, investigation methodologies, and quality assurance frameworks</li> <li>Evaluate emerging forensic technologies and techniques</li> <li>Drive service maturity and operational excellence initiatives</li> </ul> <h4>Our culture & code of conduct</h4> <p>At ZainTECH, we take pride in a culture built on collaboration, innovation, and uncompromising integrity. We are looking for individuals who share these values and are committed to customer-centricity and ethical excellence. All employees are expected to uphold our code of conduct, which serves as a guiding framework for responsible behavior across everything we do — from how we work with each other to how we engage with clients and partners globally.</p> <h4>Requirements</h4> <ul> <li>Bachelor's degree (minimum) in information technology or a related field</li> <li>Minimum 3 years experience in cybersecurity, including at least 5 completed digital forensic investigations</li> <li>At least one valid NCSC-approved forensics certification like GCFE, GCFA, CHFI, or another certification in the same field approved by the NCSC</li> <li>Disk, memory, mobile, and network forensics; evidence handling; forensic tooling (e.g. EnCase, FTK, Autopsy, X-Ways)</li> <li>Proven ability to lead forensic engagements and produce defensible reports</li> <li>Experience supporting legal proceedings or regulatory investigations is preferable</li> </ul></p><p></p>