Skip to results

IT Cybersecurity Project Lead

KBR19 hours ago

Salary
Not disclosed
Job type
Full time
Location
Basra
Deadline
Oct 8, 2026

KBR is hiring an IT Cybersecurity Project Lead based in Basra to manage cybersecurity operations, incident response, SIEM, and vulnerability management across IT and OT environments. The role requires a relevant bachelor's degree and at least 3 years of cybersecurity operations experience.

About the job

Job Title: IT Cyber Security Head

Department: Information Technology / Cybersecurity

Reports To: IT Cyber Security Head

Position Purpose

The Cybersecurity Operations Engineer is responsible for the implementation, operation, monitoring, and continuous improvement of cybersecurity controls across the organization's Information Technology (IT) and Operational Technology (OT) environments.

The role focuses on security monitoring, incident response, vulnerability management, endpoint security, identity security, and security tooling administration. The position plays a key role in protecting organizational assets from cyber threats while supporting compliance with cybersecurity policies, standards, and regulatory requirements.

The Cybersecurity Operations Engineer works closely with IT infrastructure, cloud, network, application, and OT teams to ensure security controls are implemented and operating effectively.

Responsibilities

  • Monitor security events and alerts generated by security monitoring platforms.
  • Investigate suspicious activities and security incidents.
  • Perform incident triage, containment, eradication, and recovery activities.
  • Support cyber incident response and forensic investigations.
  • Participate in on-call cyber incident response activities where required.
  • Maintain incident records and lessons learned documentation.
  • Administer and maintain SIEM platforms.
  • Develop and tune detection rules and alert thresholds.
  • Monitor log sources and ensure adequate security event coverage.
  • Investigate security alerts and escalate critical findings.
  • Develop use cases and threat detection analytics.
  • Manage Endpoint Detection and Response (EDR/XDR) solutions.
  • Support endpoint protection platforms such as Microsoft Defender, CrowdStrike, Trend Micro, or equivalent.
  • Monitor and investigate endpoint threats.
  • Ensure security agents remain operational and compliant.
  • Support server hardening and security baseline implementation.
  • Perform vulnerability scanning activities.
  • Analyse vulnerability assessment reports.
  • Prioritize remediation actions based on risk.
  • Coordinate remediation efforts with infrastructure and application teams.
  • Monitor closure of identified vulnerabilities.
  • Produce vulnerability metrics and reporting.
  • Support privileged access management solutions.
  • Monitor privileged account usage.
  • Assist with periodic access reviews.
  • Support identity governance activities.
  • Ensure compliance with least-privilege principles.
  • Administer cybersecurity technologies including:SIEM, EDR/XDR, PAM, Vulnerability Management Platforms, Email Security Solutions, Web Security Gateways, Security Monitoring Platforms, Threat Intelligence Platforms.
  • Maintain health and performance of cybersecurity systems.
  • Support technology upgrades and deployment activities.
  • Monitor emerging cyber threats and vulnerabilities.
  • Review threat intelligence feeds.
  • Assess threats for organisational relevance.
  • Recommend protective measures and compensating controls.
  • Support threat hunting activities.
  • Assist with cybersecurity monitoring of OT environments.
  • Support IEC 62443-aligned control implementation.
  • Monitor OT security events and vulnerabilities.
  • Participate in OT risk assessments.
  • Support secure network segmentation initiatives.
  • Assist in design and implementation of cybersecurity policies and standards.
  • Support cybersecurity audits and assessments.
  • Maintain operational evidence for compliance activities.
  • Support implementation of NIST, ISO 27001, and IEC 62443 requirements.
  • Prepare operational cybersecurity reports.
  • Produce incident and vulnerability metrics.
  • Maintain dashboards and KPI reporting.
  • Provide regular status updates to the Head of Cybersecurity.

Requirements

  • Bachelor's Degree in Cybersecurity, Information Technology, Computer Science, Engineering, or related discipline.
  • Minimum 3-5 years of cybersecurity operations experience.
  • Experience supporting enterprise security technologies.
  • Experience investigating cybersecurity incidents.
  • Experience with security monitoring and vulnerability management.
  • Preferred Certifications: One or more of: CompTIA Security+, CompTIA CySA+, Microsoft Security Certifications, SC-200 Security Operations Analyst, CISSP Associate, GIAC Certifications, GSEC, SSCP, CEH.
  • Technical Skills: Security Operations, Incident Response, Threat Detection, Threat Hunting, Security Monitoring, Digital Forensics Fundamentals.
  • Security Platforms: Microsoft Sentinel, Microsoft Defender XDR, CrowdStrike, Trend Micro, Tenable, Qualys, Rapid7, Splunk, QRadar.
  • Infrastructure Security: Windows Server, Active Directory, Entra ID (Azure AD), Linux Administration, Network Security, Firewalls, VPN Technologies.
  • Cloud Security: Microsoft Azure, Microsoft 365 Security, AWS Security Fundamentals.
  • OT Security (Preferred): Industrial Control Systems (ICS), SCADA Security, IEC 62443, OT Network Security.
  • Knowledge Requirements: NIST Cybersecurity Framework (CSF), NIST SP 800-53, IEC 62443, ISO 27001, CIS Critical Security Controls, Cyber Kill Chain, MITRE ATT&CK Framework, Vulnerability Management Processes, Security Incident Lifecycle Management.

Notes

  • Key Deliverables: Security Incident Reports, Vulnerability Assessment Reports, SIEM Monitoring Dashboards, Threat Intelligence Briefings, Security Control Compliance Reports, Security Monitoring Use Cases, Security Technology Health Reports, Privileged Access Monitoring Reports, Cybersecurity KPIs and Metrics.
  • Key Competencies: Analytical Thinking, Problem Solving, Technical Troubleshooting, Incident Management, Attention to Detail, Teamwork and Collaboration, Communication Skills, Risk Awareness, Continuous Learning, Customer Service Orientation.

Skills

  • Incident Response
  • Threat Detection
  • SIEM
  • EDR/XDR
  • Vulnerability Management
  • Microsoft Sentinel
  • CrowdStrike
  • Splunk
  • ISO 27001
  • NIST Cybersecurity Framework

Details

Profession
Cybersecurity Specialist
Category
IT & Software
Education
Bachelor's degree
Experience
Mid level · 3+ years

New Cybersecurity Specialist jobs in Basra

By email, once a day, only when something new is listed.

Apply on the original site