Analyst - Cyber Defense

Role Overview

Analyst - Cyber Defense at Bapco Energies. This role sits within the Cyber Defense Center (CDC), reporting to the Manager, Cyber Defense & NOC, and is responsible for delivering the highest level of service in security event monitoring, analysis, and incident response.

Role Purpose

To monitor, analyze, and respond to security events in real-time, ensuring timely identification and mitigation of threats against corporate systems and networks while maintaining detailed logs and contributing to the organization's broader cyber defense program.

Key Responsibilities

Monitoring and Analysis

• Perform real-time 'eyes on glass' monitoring and analysis of security events from multiple sources including SIEM monitoring tools, network and host-based intrusion detection systems, firewall logs, and system logs (Unix & Windows).
• Analyze security event logs and alerts to determine validity, priority, and impact against both security threat best practices and corporate policies.

Incident Response

• Address identified and confirmed security events in a timely manner and provide actionable recommendations for the business to conduct in response.
• Document security investigations through standard procedures.
• Manage and maintain the creation, tracking, actioning, and proper closure of alert tickets and reported events to the SOC.

Program and Operations Development

• Contribute to the development and organization of Cyber Security and Data Protection program management, threat intelligence, defense monitoring, and vulnerability management.
• Assist with tuning SIEM rules and creating custom log source integration with parsing.

Stakeholder Management

• Communicate regularly and align actions with all ITD technical groups to ensure that all systems and networks are operated securely.
• Liaise with other relevant stakeholders within I&DT sections and, if needed, with business units to identify and validate attempts at intrusion or compromise.
• Act as a focal point for all security-related incidents and liaise with the CDC Shift Lead.

Knowledge and Awareness

• Maintain up-to-date detailed knowledge of the IT/OT security industry including awareness of new or revised security solutions, improved security processes, new attacks, and threat vectors.

Qualifications & Experience

• Bachelor's degree in IT or Computer Security, or comparable years of experience.
• At least 3 years of experience in a SOC or security-related role.
• At least one of the following certifications: SANS security certifications (preferred), Security+, or CEH.
• Experience and extensive knowledge of SIEM, EDR, Email Security, and event log analysis.
• High understanding of processes related to threat correlation and mitigation.
• Deep understanding of cybersecurity principles, technologies, and best practices, as well as knowledge of industry standards and frameworks (e.g., NIST Cybersecurity Framework, MITRE ATT&CK framework).

Skills & Competencies

• Strong troubleshooting, reasoning, and problem-solving skills.
• Excellent communication and teamwork abilities.
• Dedicated and self-driven desire to research and learn more about the information security landscape and incident response.