Cybersecurity Engineer – Kuwait Drilling Fluids & Oil Services

Role Purpose

The Cybersecurity Engineer is responsible for the day-to-day security of KDF’s information systems, applications, networks, and digital services. The role covers security monitoring, vulnerability management, and incident handling, and contributes to KDF’s cybersecurity governance, risk, and compliance activities under the direction of the Divisional Head – Technology & Digitalization Transformation. The position reports to the Assistant Manager – Technology & Cybersecurity.

As KDF’s first dedicated cybersecurity position, the role suits a practitioner who can assess the current environment, identify gaps, and recommend practical improvements rather than wait for direction. The role also offers direct involvement in KDF’s ISO 27001 certification programme.

Key Roles and Responsibilities

• Run day-to-day security monitoring across endpoint protection platforms and Microsoft Defender, investigating and escalating alerts as required.
• Investigate suspicious activity, phishing reports, and identity-related security events through to resolution.
• Conduct vulnerability scans, assess and prioritise findings, and drive remediation with infrastructure and application teams until closure.
• Handle cybersecurity incidents, including containment, evidence collection, root-cause review, and documentation.
• Administer and review multi-factor authentication, Conditional Access policies, privileged accounts, and periodic user access reviews.
• Assess KDF’s current security posture, identify control gaps, and recommend improvements with clear justification and priority.
• Maintain the cybersecurity risk register and contribute to the development of policies, standards, and procedures.
• Support KDF’s ISO 27001 certification programme, including control implementation, evidence preparation, and closure of nonconformities within agreed timelines.
• Maintain security records and evidence, including access review records, incident logs, vulnerability scan results, and remediation history.
• Support internal and external audits by preparing evidence and tracking closure of findings and corrective actions.
• Contribute to alignment with the NIST Cybersecurity Framework and applicable Kuwait regulatory requirements.
• Support the evaluation and implementation of additional security capabilities, including centralised log management and SIEM.
• Deliver cybersecurity awareness activities, including phishing simulations and refresher training.
• Prepare regular security reports and dashboards for management, highlighting risks, trends, and recommended actions.

Job Details

Preferred Candidate

Suite de l’annonce…