Cyber Security Technical Lead

About the Job

Cyber Security Technical Lead – 12 Months rotational Contract – Iraq 28 x 28 Rotational All flights, accommodation, food, healthcare will be paid for Fluent in English, any Arabic would be a bonus Required: - I’m looking for a Windows System Administrator that have moved into a Cyber security role, I need a strong Windows background along with Intune, Azure, Active Directory and Group Policies, 5 years Windows and 5 years Cyber minimum. This is not a junior role; I will need for you to be able to converse at CIO level should the Cyber Security manager not be available. Good scripting experience. Threat hunting and Red-Team, vulnerability management, incident response, enterprise assets and data • Lead Security Operations: o Oversee daily security monitoring, log analysis, and incident response activities as part of the Security Operations Center (SOC). o Manage a small team of Digital Security Analysts (2-4 people). o Coordinate with the various digital teams to ensure secure configurations across Windows systems. o Threat Hunt constantly across the environment for anomalies. • Threat Detection & Response: o Develop and maintain SIEM rules in Sentinel and use cases tailored to Windows environments. o Investigate and respond to security incidents, including malware infections, unauthorized access, and data exfiltration. o Introduce new hardening technologies into the environment. • Vulnerability Management: o Conduct regular vulnerability assessments and penetration tests on Windows servers, endpoints, and Active Directory. o Prioritize and remediate findings in collaboration with system administrators. • Policy & Compliance: o Ensure compliance with internal security policies and external regulations (e.g., ISO 27001, NIST, GDPR). o Develop and enforce Windows-specific hardening guidelines and security baselines. • Security Architecture & Tools: o Recommend and implement security tools (e.g., EDR, DLP, Vault technologies) optimized for Windows environments. o Support integration of Windows systems with identity and access management solutions. • Reporting & Documentation: o Prepare detailed reports on security incidents, risk assessments, and mitigation strategies. o Maintain documentation for security policies, configurations, and incident response playbooks. o Maintain and manage KPI’s for Digital Security operations. Essential • Bachelor’s degree in Engineering, Computer Science, or related field. • Programming skills in Python/other languages and Unix tools skills (sed, awk etc.) • 15+ years’ experience in IT. • 7-10+ years’ experience in digital security in an engineering and/or technical role. • Ability to work within a multicultural environment. Desirable • Experience in a similar role in Oil & Gas or a similar industrial/asset-intensive sector. • Certifications such as OWSP, CISSP, GCWN or Microsoft related security certificates. • CCNP/CCIE Security certification or equivalent preferred. • Previous role as Windows System Administrator preferred. • Experience in designing and deploying security solutions. • Strong expertise in Windows Server, Active Directory, Group Policy, Entra ID and PowerShell scripting, with deep understanding of the Windows operating systems. • Experience with security tools such as Microsoft Defender, Sentinel, Splunk, or similar. • Must have Azure hands on knowledge. • Threat hunting and Red-Team/Pen Testing knowledge and skills. • Excellent communication skills (verbal and written). • Strong analytical and interpersonal skills, and ability to work with staff at all levels. • Proactive thinking, and problem-solving skills to come up with options and solutions to complex technical issues. • Delivery focused with good attention to details. • Willing to challenge and be challenged. • Self-motivated, positive attitude, energetic, collaborative, and leads by example. • Demonstrates strong customer empathy and business understanding. With over 90 years' combined experience, NES Fircroft (NES) is prou