Analyst - Cyber Defense

Employment; Manama; On-site; BHD 4,500 - 7,900; Full time

Job summary

Industry University Finance and Student Accounts is seeking a CDC Analyst to support security event monitoring, incident response, and threat intelligence under the Manager, Cyber Defense & NOC. You will analyze logs, triage events, and provide actionable recommendations to protect critical systems.

The role requires 3+ years in a SOC or security-related position, a degree in IT or Security, and certifications such as Security+ or CEH. Proficiency with SIEM/EDR and log analysis is essential.

Qualifications

• Bachelor's degree in IT or Computer Security or equivalent experience.
• Security+ or CEH certifications are preferred.
• 3+ years in a SOC or security-related role.
• Experience with SIEM, EDR, and event-log analysis.

Responsibilities

• Analyse security event logs and alerts to determine validity, priority, and impact against security best practices and policies.
• Perform real-time monitoring and analysis of security events from SIEM, network and host-based sources.
• Address identified security events promptly and provide actionable recommendations for response.
• Document security investigations using standard procedures.

Skills

Threat correlation

Incident response

Security analysis

Troubleshooting

Communication

Teamwork

Education

Bachelor's degree in IT or Computer Security

Tools

SIEM

EDR

Email security

Job description

Industry University Finance and Student Accounts

Key Result Areas:

• Under the leadership of the Manager, Cyber Defense & NOC, the CDC Analyst will ensure delivery of the highest level of service in the support of conducting security event monitoring and analysis as well as incident response.
• Analyse security event logs and alerts to determine validity, priority, and impact against both security threat best practices and corporate policies.
• Perform operational 'eyes on glass' real-time monitoring and analysis of security events from multiple sources including but not limited to events from SIEM monitoring tools, network and host-based intrusion detection systems, firewall logs, system logs (Unix & Windows).
• Address identified and confirmed security events in a timely manner and provide actionable recommendations for the business to conduct in response.
• Contribute to the development and organization of Cyber Security and Data Protection program management, threat intelligence, Defense monitoring and vulnerability management.
• Manage and maintain the creation, tracking, actioning, and proper closure of alert tickets and reported events to the SOC.
• Maintain up-to-date detailed knowledge of the IT/OT security industry including awareness of new or revised security solutions, improved security processes, new attacks, and threat vectors.
• Documenting security investigations through standard procedures

Assist with tuning SIEM rules and creating custom log source integration with parsing

Bapco Energies

Bapco Energies operates a portfolio spanning the entire energy value chain in the Kingdom of Bahrain. The portfolio includes wholly-owned subsidiaries and specialized operating companies. Together, these companies drive Bapco Energies' mission to power the next generation.

Responsibilities:

Communications and Working Relationships:

Internal

• Communicates regularly and aligns actions with all ITD technical groups to ensure that all systems and networks are operated securely.
• Liaises with other relevant stakeholders within I&DT sections and - if needed - with business units, to identify and validate attempts at intrusion or compromise, and provides high quality investigation and response actions.

External

• Acts as a focal point for all security related incidents and liaises in with CDC Shift Lead.

Qualifications:

Knowledge Skills and Experience:

• Bachelor's degree in IT or Computer Security or comparable years' experience.
• Must have at least one of the following certifications:
  Any Sans security certifications preferred, Security+, or CEH.
• 3+ years of experience in a SOC or security-related role.
• Experience and extensive knowledge of SIEM, EDR, Email Security & Event log analysis.
• High understanding of processes related to threat correlation and mitigation.
• Deep understanding of cybersecurity principles, technologies, and best practices, as well as knowledge of industry standards and frameworks (e.g., NIST Cybersecurity Framework, MITRE ATT&CK framework).
• Dedicated and self-driven desire to research and learn more about the information security landscape and incident response.
• Strong troubleshooting, reasoning, and problem-solving skills.

Excellent communication and teamwork abilities.