Security Analyst

Emirates National Oil Company Limited (ENOC) L.L.C.; Dubai; On-site; AED 279,000 - 469,000; Full time

Job summary

ENOC - SSC is seeking a Security Analyst to monitor ENOC environments 24x7, perform initial incident analysis, and escalate to senior analysts for deeper investigation per established policies and procedures.

The role requires knowledge of security incident handling, log analysis, and coordination with internal and external stakeholders. On-call duties and weekend shifts are expected.

Qualifications

• Bachelor’s degree or equivalent in computer science, engineering or business.
• Professional security certifications such as CISSP, GCTI, GCFA, GNFA.
• 5+ years of information security or technology experience.
• 3+ years in relevant security experience.
• Experience across multiple industries is preferable.

Responsibilities

• Follow response procedures and other CIC SOPs based on impact analysis and predetermined actions.
• Acknowledge, analyse and validate vulnerabilities/incidents from SIEM or other security solution.
• Acknowledge, analyse and validate incidents from other reporting mechanisms (email, phone, etc.).
• Review policies, standards, procedures, and guidelines to prevent unauthorized use or destruction of ENOC information assets.
• Conduct analysis of log files to triage security events; determine root cause and attack methods.
• Coordinate with stakeholders to handle cyber incidents per SOPs and management directions.
• Participate in post-incident reviews and propose improvements.

Skills

SIEM

Incident response

Vuln analysis

Education

Bachelor’s degree in Computer Science, Engineering or Business field

CISSP, GCTI, GCFA, GNFA

Tools

SIEM tooling

Job description

Select how often (in days) to receive an alert:

Security Analyst

Date: 31 Aug 2026

Location: DUBAI, AE

Company: ENOC

Job Title

Security Analyst

Business

ENOC - SSC

Job Purpose

The primary function of this role is to monitor the ENOC environment on 24*7 basis and conduct initial analysis’s for events to identify any cyber security threats or attacks on ENOC IT/OT assets. In addition to preforming first response assessment of the cyber Security incident and escape to Senior Security Analyst for further investigation and response as per approved policies, processes and procedures.

Principal Accountabilities

Operational

• Follow response procedures and other CIC related SOPs based on the incident impact analysis & predetermined response actions procedures
• Acknowledge, analyse and validate vulnerabilities/incidents triggered from correlated events through SIEM or other security solution
• Acknowledge, analyse and validate incidents received through other reporting mechanisms such as email, phone calls, management directions, etc.
• Gain knowledge of existing policies, standards, procedures, and guidelines to prevent the unauthorized use, release, modification, or destruction of ENOC information assets
• Gain an understanding of security risks and controls
• Undertake first stages of false positive and false negative analysis
• Perform analysis of log files to collect more contextual information in order to triage security events
• Review and align priority, severity and classification of security incidents
• Collect contextual information and pursue technical root cause analysis & attack method analysis
• Conduct analysis of the events/incidents to identify potential deficiencies in deployed controls led to the incident to be materialized
• Analyse reported cyber security events and incidents and recommend remediation and improvement actions
• Provide functional support and content development and improvements for the SIEM and other security technologies used by CIC.
• Coordinate with internal and external stakeholders to handle cyber incidents as per approved SOPs and management directions
• Participate in post incident reviews and recommend improvements plans
• Investigate, document, and report on information security issues and emerging trends.
• Should be on-call 24 hours per day to respond to security emergences or other related problems
• Should work on shifts schedule which includes weekends

Additional Principal Accountabilities

Cyber Information Security Responsibilities

• Comply with all applicable information security policies, standards, and procedures.
• Classify and protect information assets in accordance with the Data Classification Standard.
• Participate in mandatory information security awareness and training programs.
• Support information security initiatives and activities within the organization.
• Consider information security requirements when managing changes involving information assets.
• Report security incidents, vulnerabilities, weaknesses, or non-compliance in accordance with established procedures.
• Fulfil role-specific information security responsibilities and contribute to maintaining the effectiveness of the Information Security Management System (ISMS).

Experience

Education

• Degree: Bachelor’s degree in Computer Science, Engineering or Business field or equivalent, Diploma with additional relevant experience.
• Required professional certifications: Professional certificate such as CISSP, GCTI , GCFA, GNFA

Experience

• 5+ years of Information security or technology experience.
• 3+ years in relevant experience.
• Working experience in multiple industries (e.g. Energy, Utilities, Retail, Government…) is preferable.
• Working experience in cyber security threats monitoring and handling
• Exposer to OT security operation center experience will be a pulse.