Analyst - Cyber Defense

Key Result Areas:

• Under the leadership of the Manager, Cyber Defense & NOC, the CDC Analyst will ensure delivery of the highest level of service in the support of conducting security event monitoring and analysis as well as incident response.
• Analyse security event logs and alerts to determine validity, priority, and impact against both security threat best practices and corporate policies.
• Perform operational 'eyes on glass' real-time monitoring and analysis of security events from multiple sources including but not limited to events from SIEM monitoring tools, network and host-based intrusion detection systems, firewall logs, system logs (Unix & Windows).
• Address identified and confirmed security events in a timely manner and provide actionable recommendations for the business to conduct in response.
• Contribute to the development and organization of Cyber Security and Data Protection program management, threat intelligence, Defense monitoring and vulnerability management.
• Manage and maintain the creation, tracking, actioning, and proper closure of alert tickets and reported events to the SOC.
• Maintain up-to-date detailed knowledge of the IT/OT security industry including awareness of new or revised security solutions, improved security processes, new attacks, and threat vectors.
• Documenting security investigations through standard procedures

Assist with tuning SIEM rules and creating custom log source integration with parsing

Bapco Energies operates a portfolio spanning the entire energy value chain in the Kingdom of Bahrain. The portfolio includes wholly-owned subsidiaries and specialized operating companies. Together, these companies drive Bapco Energies' mission to power the next generation.

Communications and Working Relationships:

• Communicates regularly and aligns actions with all ITD technical groups to ensure that all systems and networks are operated securely.
• Liaises with other relevant stakeholders within I&DT sections and - if needed - with business units, to identify and validate attempts at intrusion or compromise, and provides high quality investigation and response actions.

• Acts as a focal point for all security related incidents and liaises in with CDC Shift Lead.

Knowledge

Skills and Experience:

• Bachelor's degree in IT or Computer Security or comparable years' experience.
• Must have at least one of the following certifications:
  Any Sans security certifications preferred, Security+, or CEH.
• 3+ years of experience in a SOC or security-related role.
• Experience and extensive knowledge of SIEM, EDR, Email Security & Event log analysis.
• High understanding of processes related to threat correlation and mitigation.
• Deep understanding of cybersecurity principles, technologies, and best practices, as well as knowledge of industry standards and frameworks (e.g., NIST Cybersecurity Framework, MITRE ATT&CK framework).
• Dedicated and self-driven desire to research and learn more about the information security landscape and incident response.
• Strong troubleshooting, reasoning, and problem-solving skills.

Excellent communication and teamwork abilities.