Senior Cyber Security Analyst - Emirati Talent

Emirates National Oil Co.; Dubai; On-site; AED 400,000 - 500,000; Full time

Job summary

A leading oil and gas company in Dubai is seeking a Senior Cyber Security Analyst to monitor and respond to cyber security threats in their IT/OT systems. This role involves incident response, security assessments, and coordination with stakeholders. The ideal candidate should have over 5 years of experience in information security and relevant professional certifications. This is a full-time position offering opportunities for growth within a dynamic environment.

Qualifications

• A solid degree or diploma with relevant work experience in information security.
• 5+ years of information security or technology experience is required.
• 3+ years in a relevant cyber security role.

Responsibilities

• Monitor the environment and conduct analysis for cyber security threats.
• Respond to incidents and escalate as needed.
• Perform analysis of log files to gather information.

Skills

Cyber security monitoring

Incident response

Threat analysis

Vulnerability assessment

Education

Bachelor’s degree in Computer Science, Engineering or Business

Professional certifications (CISSP, GCTI, GCFA, GNFA)

Job description

Overview

Senior Cyber Security Analyst - Emirati Talent

The primary function of this role is to monitor the ENOC environment on a 24x7 basis and conduct initial analysis for events to identify cyber security threats or attacks on ENOC IT / OT assets. In addition, perform first response assessment of cyber security incidents and escalate to the Senior Security Analyst for further investigation and response per approved policies, processes and procedures.

Responsibilities

• Follow response procedures and other CIC related SOPs based on the incident impact analysis and predetermined response actions procedures.
• Acknowledge, analyse and validate vulnerabilities / incidents triggered from correlated events through SIEM or other security solutions.
• Acknowledge, analyse and validate incidents received through other reporting mechanisms such as email, phone calls, management directions, etc.
• Know and apply existing policies, standards, procedures, and guidelines to prevent unauthorized use, release, modification, or destruction of ENOC information assets.
• Understand security risks and controls.
• Undertake first stages of false positive and false negative analysis.
• Perform analysis of log files to collect contextual information to triage security events.
• Review and align priority, severity and classification of security incidents.
• Collect contextual information and pursue technical root cause analysis and attack method analysis.
• Analyze events / incidents to identify potential deficiencies in deployed controls that allowed the incident to materialize.
• Analyze reported cyber security events and incidents and recommend remediation and improvement actions.
• Provide functional support and content development / improvements for the SIEM and other security technologies used by CIC.
• Coordinate with internal and external stakeholders to handle cyber incidents as per approved SOPs and management directions.
• Participate in post-incident reviews and recommend improvement plans.
• Investigate, document, and report on information security issues and emerging trends.
• Be on-call 24 hours per day to respond to security emergencies.

Education and Certifications

• Degree: Bachelor’s degree in Computer Science, Engineering or Business field or equivalent; Diploma with additional relevant experience.
• Required professional certifications: CISSP, GCTI, GCFA, GNFA.

Experience

• 5+ years of information security or technology experience.
• 3+ years in relevant experience.
• Working experience in multiple industries (e.g., Energy, Utilities, Retail, Government) is preferable.
• Working experience in cyber security threats monitoring and handling.
• Exposure to OT security operation center experience is a plus.

Job Details

• Seniority level: Mid-Senior level
• Employment type: Full-time
• Job function: Information Technology
• Industries: Oil and Gas