Description :
Grade Level: L2
Location: Islamabad
Last date to apply: Aug 15th, 2022
What is Cyber Security Network Expert?
Cyber Security Network Expert is responsible to evaluate and plan mitigations of different information security related risk to Jazz network and plan/propose/implement cyber security solutions to address those risks. Main responsibility of this role is to analyze and effectively implement different network security control to protect organization from different threats.
The role reports directly to the Stream Head Cyber Security with an extended team of 10 team members.
What does Cyber Security Network Expert do?
- Security review of different projects. (BSS Stack, system hardening, encryption, logging, authentication, vulnerability assessment, incident management, patch management)
- New Security project implementation as per the organization risk profile (NAC, Core Network, SS7 & Diameter Signalling, Anti-DDOS)
- Regular monitoring of different key system user activity (SOX, core network, internal audit, external audit requirements)
- Approval/rejection of different tickets based on the security review of the request
- Vulnerability assessment review of different internal and external systems
- Assessment of projects, services and other initiatives initiated by multiple teams for cyber security risks and incorporating controls to address the risks and compliance of Jazz cyber security policies.
- Define security solution capacity and enhancement on the role of information security in different projects.
- Security assessment of Network access control changes and Approval/Rejection of different tickets based on the security review of the request (software installation, admin rights approval, etc.
- Ensuring compliancy with security policies
- Network security policy implementation and review (hardening guidelines, Secure protocols, restrictive administrative access)
- Network security posture analysis and recommendations
- SS7 & diameter signalling network vulnerability and mitigation planning
- SS7 & Diameter firewall coordination and evaluating different requirement to fulfill the organization needs.
Jazz is an equal opportunity employer. We celebrate, support, and thrive on diversity and are committed to creating an inclusive environment for all employees.
Requirements
- BS/MS in information security/Information Technology
- Practical experience of security management in banking / Telco sector
- Experience in planning and execution of network security projects
· Functional
- Ability to organize, plan and document tasks;
- Ability to manage internal & external stakeholders;
- Possess good logical and analytical skills to help in analysis of Cyber Security risks
· Technical
- Strong security risk management skills;
- In depth knowledge of the TCP/IP protocol stack and understanding of TCP/IP services (SMTP, DNS etc.) and port details (25, 53 etc.) of commonly used TCP/IP applications;
- Knowledge/understanding of Telecom core network, BSS, NFVI, SS7 & Diameter protocols etc;
- In depth knowledge of network and system security controls
- In depth knowledge of security solutions including IDS/IPS, NAC, EDR, SIEM, Anti-DDOS, SS7 Firewalls & IDS, etc.
- Skill in recognizing and categorizing types of vulnerabilities and associated attacks.
- Skill in assessing security controls based on cybersecurity principles and tenets. (e.g., CIS CSC, NIST SP 800-53, Cybersecurity Framework, etc.).
- Skill in conducting trend analysis and reporting.
Why Join Jazz?
As one of the leading employers in the country, Jazz epitomizes the philosophy that each Jazz employee is passionately living a better every day inspired and enabled by visionary leadership, a unique professional culture, a flourishing lifestyle, and continuous learning and development.
As one of the largest private sector organizations in Pakistan, our objective is to continue to change the lives of our 65 million customers for the better. This is an opportunity for someone who wants to be part of something transformative, someone who can play a critical role in driving our success. Together, we can empower millions more with the tools necessary to progress in an increasingly digital economy.