Position: Cyber Security Officer (Dubai office)
Company: Bistox
Category: Security
Experience required: 5y
English level: upper

Dubai - United Arab Emirates Full Time

Compensation: $6,000 to $8,000 Monthly
**Industry** Centralised Exchange
**Company Size** Mid-size (20-249)
**Experience** Senior Level
**Payment in Crypto** Yes
**Remote Job** No
**JOB DESCRIPTION**

Bistox is a pioneering cryptocurrency exchange that combines the power of blockchain technology, FinTech advancements and leading-edge trading tools. We are looking for an experienced Cyber Security officer, who is living in Dubai (or ready to relocate) to design and enforce policies and procedures that protect our organization's computing infrastructure from all forms of security breaches. You will be responsible for identifying vulnerabilities and working with our Dev department to resolve them, ensuring that our network and data remain secure.

**WHAT YOU WILL DO IN THIS ROLE:**
● Identifying vulnerabilities in our current network.
● Developing and implementing a comprehensive plan to secure our computing network.
● Monitoring network usage to ensure compliance with security policies.
● Keeping up to date with developments in IT security standards and threats.
● Performing penetration tests to find any flaws.
● Investigate alerts generated by our detection system to determine whether the content in question is a live or potential attack.
● Collaborating with the Compliance and the Dev department to improve security.
● Documenting any security breaches and assessing their damage.
● Educating colleagues about security software and best practices for information security.

**REQUIREMENTS:**
● Degree in computer science or a technology-related field.
● **A CCISO Program certificate is required **
● 4+ years of prior relevant experience:
 Advanced understanding of TCP/IP, common networking ports and protocols, traffic flow, system administration, OSI model, defense-in-depth and common security elements.
 Hands-on experience analyzing high volumes of logs, network data (e.g. Netflow, FPC), and other attack artifacts in support of incident investigations
 Experience with vulnerability scanning solutions
 Familiarity with the DOD Information Assurance Vulnerability Management program.
 Proficiency with any of the following: Anti-Virus, HIPS, ID/PS, Full Packet Capture, Host-Based Forensics, Network Forensics, and RSA Security
 In-depth knowledge of architecture, engineering, and operations of at least one enterprise SIEM platform (e.g. Nitro/McAfee Enterprise Security Manager, ArcSight, QRadar, LogLogic, Splunk)
 Experience developing and deploying signatures (e.g. YARA, Snort, Suricata, HIPS)
 Understanding of mobile technology and OS (i.e. Android, iOS, Windows), VMware technology, and Unix and basic Unix commands
 Solid knowledge of various information security frameworks.
● Professional information security certification:
 Advanced certifications such as SANS GIAC/GCIA/GCIH, CISSP or CASP and/or SIEM-specific training and certification
 DoD-8570 IAT Level 2 baseline certification (Security+ CE or equivalent) at start date
● Excellent problem-solving, analytical, verbal and written communication skills.
● English intermediate +

**WHAT WE OFFER:**
- The chance to work in a fast-paced start-up environment with experienced industry leaders;
- Full-time employment with a competitive salary in USDT;
- Comfortable modern office, where there is everything to work productively and relax during breaks;
- Easy-going colleagues to work hard with and joke around with;
- Constant flow of tasks to help you apply and improve a broad range of soft and hard skills;
- Paid educational stuff: books, courses, personal laptop for work and whatever else you need to reach set goals.