Internal Client Services: Technology

at  Grant Thornton

We’re a large and growing professional services firm that still feels like a community. We employ over 750 people across the UAE and experiencing exciting growth! We truly care about our colleagues, our clients, and the communities where we work and live.
As a Senior Cyber Security Analyst, you’ll collaborate with stakeholders to ensure compliance with industry standards, leading incident repose efforts, managing security technologies and drive proactive threat detection and prevention. Discover your purple and join our Technology & Innovation Team today!

Technical Skills

• Strong hands-on experience in security incident analysis, investigation, and incident response
• Hands-on experience implementing, operating, and optimizing security technologies such as SIEM, EDR, XDR, DLP, Vulnerability Management, Email Security, and other data protection elements
• Proficient in cloud security solutions, principles, and best practices
• Proficiency in forensic investigation methodologies
• Deep understanding of security best practices and frameworks (e.g., ISO 27001, NIST, CIS)
• Strong knowledge of application and API security
• Strong understanding and knowledge of AI risks and security principles
• Good understating of networking concept

• Acting as a primary incident responder and performing senior-level security incident lifecycle management by timely analysis, investigation, and response for security alerts/incidents
• Creating and maintaining security incident playbooks for effective incident responses
• Handling phishing email investigations
• Performing cloud security posture management
• Handling proactive threat hunting, detection, and reporting
• Performing security gap assessments and managing their remediations
• Maintaining timely reporting of all security incident records and other cyber metrics with management
• Assisting in risk assessments, data protection impact assessments, business impact assessments, and other security governance activities
• Assisting in security process enhancement and adapting new technologies based on emerging threats and business needs
• Assessing and ensuring endpoints, servers, networks, and other systems are hardened as per industry standards (e.g., CIS controls) to minimize threats and vulnerabilities
• Assessing and integrating security practices continuously as part of the application development lifecycle
• Assessing and recommending overall security best practices

Technical Skills

• Strong hands-on experience in security incident analysis, investigation, and incident response
• Hands-on experience implementing, operating, and optimizing security technologies such as SIEM, EDR, XDR, DLP, Vulnerability Management, Email Security, and other data protection elements
• Proficient in cloud security solutions, principles, and best practices
• Proficiency in forensic investigation methodologies
• Deep understanding of security best practices and frameworks (e.g., ISO 27001, NIST, CIS)
• Strong knowledge of application and API security
• Strong understanding and knowledge of AI risks and security principles
• Good understating of networking concepts