Company

Dubai Electricity and Water Authority (DEWA) is the exclusive provider of electricity and water services to the people of Dubai. DEWA is one of the most advanced utilities in the world and is working to increase its share of clean energy to achieve the Dubai Clean Energy Strategy 2050, with targets to generate 25% of Dubai’s total power output from clean energy by 2030 and 75% by 2050.   DEWA has a workforce of over 11,000 employees and manages the entire chain of electricity and water, from electricity and water production to transmission and distribution to its customers. DEWA’s vision is to become a sustainable innovative world-class utility.

 

Department

Transmission Power

 

Project

Operational Technology Security

 

Tasks

The candidate will report to DEWA's Deputy Manager – Threat Monitoring & Incident Management within the Transmission Power – Operational Technology Security Division and be responsible for the day to day activities as follows:
-Plan, handle, validate, qualify and coordinate security incidents across monitored Operational Technology (OT) environments.
-Responds to disruptions within the pertinent domain to mitigate immediate and potential threats in coordination with responsible parties for the monitored OT networks.
-Investigates and analyzes relevant response activities and evaluates the effectiveness of and improvements to existing practices.
-Handle collection of threat intelligence data to monitor risk from applicable threats to OT networks and recommend changes to response procedures where required to meet resilience targets.
-Use designated security tools within the security operations center (SOC) to monitor and respond to threats as required; coordinate with respective line departments for carrying out any actions across the OT environments to control threats.
-Perform command and control functions in response to incidents including incidents triage, to include determining scope, urgency and potential impact; identifying the specific vulnerability and making recommendations that enable expeditious remediation.
-Perform in real-time incident handling (e.g., forensic collections, intrusion correlation and tracking, threat analysis and direct system remediation) tasks to support deployable response teams.
-Support analysis of network alerts from various sources within the enterprise and determines possible causes of such alerts.
-Support tracking and documenting incidents from initial detection through final resolution.
-Support delivery of security services provided from the OT Security Cloud.
-Support implementation of pragmatic corrective actions as part of audit outcomes to support closure of identified gaps and support continual improvement process.
 

 

Requirements

Bachelors degree in Computer Science / Information Security or equivalent.
At least 6 years relevant experience in related field.
Demonstrable expertise in security monitoring technologies covering leading threat intelligence management frameworks, protocols (TAXII/STIX, etc), SIEM, etc.
Security Certification e.g. CISSP, CISM, GICSP or equivalent and ISO/IEC standards e.g. ISO 27001.
Proven expertise in Information Security Analysis & Forensic.
Good understanding and experience with Networking, TCP/IP, firewall and IPS configuration and Windows servers; Proven ability to manage and support crisis situations.
Excellent communication skills (written and verbal), interpersonal and ability to convey security and risk-related concepts to technical and non-technical audiences.