Senior Security Analyst

Emirates National Oil Company Limited (ENOC) L.L.C.; Dubai; Sur place; AED 300 000 - 420 000; Plein temps

Résumé du poste

ENOC, located in Dubai, seeks a Senior Security Analyst to monitor its environment on a 24x7 basis, conducting advanced event analysis and escalating to the Cyber Intelligence Center Manager as per established policies and procedures.

The role requires 7+ years in information security or technology, a Bachelor's degree, and certifications such as CISSP, GCTI, GCFA or GNFA; OT security operation center experience is a plus.

Qualifications

• Bachelor's degree or equivalent in Computer Science, Engineering or Business field.
• Professional certifications such as CISSP, GCTI, GCFA, GNFA.
• 7+ years of information security or technology experience; 4+ years in relevant role.
• OT security operation center experience is a plus.

Responsabilités

• Monitor ENOC environment 24x7 and analyze events.
• Perform advanced incident analysis and escalate as per policy.
• Lead malware analysis, digital forensics and investigations.
• Develop SIEM rules and correlation content; improve monitoring capabilities.
• Coordinate with CIC and stakeholders during incident handling and remediation.
• Report IT security status and identify improvements to management.

Connaissances

SIEM analysis

Incident response

Threat hunting

Security analytics

On-call readiness

Formation

Bachelor's degree in CS/Engineering/Business

Diploma with relevant experience

Description du poste

Select how often (in days) to receive an alert:

Senior Security Analyst

Date: 29 Oct 2026

Location: DUBAI, AE

Company: ENOC

Job Title

Senior Security Analyst

Job Purpose

The primary function of this role is to monitor the ENOC environment on 24*7 basis and conduct advance analysis’s for events to identify any cyber security threats or attacks on ENOC IT/OT assets. In addition to preforming advance response assessment of the cyber security incident and escalated to Cyber Intelligence Center Manager as per approved policies, processes and procedures.

Principal Accountabilities

• Operational
• Follow response procedures and other CIC related SOPs based on the incident impact analysis & predetermined response actions procedures Manage the communication of policies & guidelines and monitor the compliance CIC operations to the cyber-security policies & guidelines.
• Work closely with security analysts to get direct feedback about new, unknown suspicious behaviour
• Handle escalated incident from security analyst to conduct deep investigations.
• Gain knowledge of existing policies, standards, procedures, and guidelines to prevent the unauthorized use, release, modification, or destruction of ENOC information assets
• Conduct malware analysis using run-time analysis, comparative analysis, and reverse engineering tools
• Conduct digital forensics and deep investigations and evidence handling in line with best practices
• Preform threat hunting, discovery and exploration to identify threats that pass traditional detection tools.
• Perform proactive research to identify and characterize new emerging threats, vulnerabilities, and risks.
• Review and align priority, severity and classification of security incidents
• Develop metrics, reporting and documentation on frequency, impact, and types of incidents.
• Collaborate on the investigation of incidents, containment, remediation and root cause analysis
• Collaborate and conduct research to design and implement new security technology, update existing strategies, improve process and create additional documentation.
• Develop techniques and processes to identify anomalous behavioral patterns.
• Collect contextual information and pursue technical root cause analysis & attack method analysis
• Identify gaps, take ownership of tasks and become a contributor to projects related to CIC as needed.
• Advocate security best practices, strategy, architecture, and assist in security design consultations.
• Apply strategic and tactical responses in challenging environments with heterogeneous systems.
• Provide functional support and content development and improvements for the SIEM and other security technologies used by CIC.
• Participate in Development and implementation of new correlation rules and use-cases in SIEM and enhance the monitoring and detection capabilities of the CIC to integrate SIEM with other monitoring tools with appropriate scripting knowledge skills
• Coordinate with internal and external stakeholders to handle cyber incidents as per approved SOPs and management directions
• Participate in closing identified security audit points.
• Periodically report on IT security status, security systems efficiency, and recommended improvements to management.
• Should be on-call 24 hours per day to respond to cyber security emergences

Cyber Information Security Responsibilities

• Comply with all applicable information security policies, standards, and procedures.
• Classify and protect information assets in accordance with the Data Classification Standard.
• Participate in mandatory information security awareness and training programs.
• Support information security initiatives and activities within the organization.
• Consider information security requirements when managing changes involving information assets.
• Report security incidents, vulnerabilities, weaknesses, or non-compliance in accordance with established procedures.
• Fulfil role-specific information security responsibilities and contribute to maintaining the effectiveness of the Information Security Management System (ISMS).

Experience

• Education
• Degree: Bachelor’s degree in Computer Science, Engineering or Business field or equivalent, Diploma with additional relevant experience.
• Required professional certifications: Professional certificate such as CISSP, GCTI , GCFA, GNFA
• Experience
• 7+ years of Information security or technology experience.
• 4+ years in relevant experience.
• Working experience in multiple industries (e.g. Energy, Utilities, Retail, Government…) is preferable.
• Working experience in cyber security threats monitoring and handling
• Exposer to OT security operation center experience will be a pulse.