Cyber Threat Intelligence Analyst - Emirati Talent

Overview

The main responsibility of this position is to provide continuous monitoring of the ENOC IT and OT environments around the clock, gathering and analyzing intelligence to detect and counteract cyber threats targeting company assets. This includes advanced threat modeling and escalation of incidents following established organizational policies and procedures.

Key Responsibilities

• Adhere to response protocols and standard operating procedures based on incident impact evaluation and predefined response actions.
• Communicate policies and guidelines and ensure compliance with cybersecurity protocols within the Cyber Intelligence Center (CIC).
• Analyze raw intelligence and data to identify emerging cyber threats, trends, and developments across cybersecurity domains.
• Keep abreast of technological changes and threat landscape shifts to inform strategic cybersecurity planning and architectural design.
• Continuously monitor external threat intelligence for emerging risks and advise relevant teams on mitigation steps.
• Track security vulnerabilities from vendors and third parties actively.
• Create and maintain an indicators of compromise (IOCs) taxonomy, sharing details with security teams including the Security Operations Center.
• Analyze ENOC’s cybersecurity posture concerning critical infrastructure and business lines, focusing on detection of implants, backdoors, and malware indicating persistent threats.
• Generate high-quality intelligence reports for management and other stakeholders.
• Consistently apply analytic tradecraft methodologies to intelligence gathering activities.
• Investigate, document, and report on emerging cybersecurity issues and trends.
• Monitor and document tactics, techniques, and procedures (TTPs) used by cyber threat actors through deep analysis of intelligence.
• Identify intelligence gaps and coordinate information requests to close these gaps.
• Provide actionable cyber intelligence in strategic, technical, and tactical formats through reports, briefings, and presentations.
• Predict future activities of cyber threat actors based on existing knowledge.
• Conduct relevant research and data analytics using internal and external tools to identify threats effectively.
• Collaborate closely with security analysts and senior analysts to receive feedback on suspicious behavioral patterns.
• Support and enhance Cyber Intelligence Center technologies, especially SIEM and related tools.
• Develop and implement new correlation rules and use cases for SIEM, improving integration with other monitoring solutions utilizing scripting skills.
• Be available 24/7 for incident response to cybersecurity emergencies.

Educational Qualifications and Certifications

• Bachelor’s degree in Computer Science, Engineering, or Business-related field.
• Professional certifications required include CISSP, GCTI, GCFA, and GNFA.

Experience Requirement

• Minimum of 7 years in information security or related technology roles.
• At least 4 years of direct experience in relevant cybersecurity functions.
• Desirable experience across multiple sectors such as Energy, Utilities, Retail, and Government.
• Demonstrated experience in monitoring and managing cyber security threats.
• Exposure to operational technology (OT) security operations centers is considered an advantage.