Senior Cyber Security Analyst - Emirati Talent

Role Overview

This position is primarily responsible for continuous monitoring of ENOC's information and operational technology environments around the clock. The analyst will perform initial evaluations of security events to detect cyber threats or attacks targeting ENOC IT/OT assets and provide first response assessments before escalation according to established protocols.

Key Responsibilities

• Execute incident response procedures and internal CIC standard operating processes based on impact analysis and predefined actions.
• Identify and validate vulnerabilities and security incidents detected via SIEM and other tools or through direct reports like emails, phone calls, and directives.
• Acquire comprehensive knowledge of policies, standards, and guidelines to prevent unauthorized access or damage to ENOC’s information assets.
• Understand security risks and corresponding controls to enhance analyses.
• Conduct initial assessments to distinguish false positives and negatives.
• Analyze log files for in-depth event triage and contextual information gathering.
• Review and adjust the prioritization, severity, and classification of security incidents appropriately.
• Gather background details and pursue root cause and attack vector analyses.
• Evaluate security deficiencies that enabled incidents and recommend corrective improvements.
• Advise on remediation strategies and improvements based on incident analysis findings.
• Support the development and enhancement of SIEM and other cybersecurity technologies.
• Collaborate with internal and external stakeholders to manage cyber incidents per SOPs and management orders.
• Participate in incident post-mortem reviews and suggest process improvements.
• Document and report on security issues, trends, and emerging threats.
• Maintain availability for 24/7 on-call emergency security responses.

Educational and Professional Requirements

• Bachelor's degree in Computer Science, Engineering, Business, or equivalent diploma with relevant experience.
• Professional certifications such as CISSP, GCTI, GCFA, or GNFA are mandatory.

Experience Qualifications

• Minimum of 5 years in information security or technology roles.
• At least 3 years of related experience in security analysis or incident monitoring.
• Preferred experience from multiple sectors such as energy, utilities, retail, or government.
• Hands-on experience in cyber threat surveillance and response.
• Exposure to security operations within operational technology (OT) environments is highly advantageous.