Senior Analyst - Cyber Defense

Role Overview

Senior Analyst - Cyber Defense at Bapco Energies. Location not specified in source.

Role Purpose

Develop and implement cybersecurity containment and recovery strategies, lead incident response activities, conduct threat hunting and vulnerability assessments, and mentor security operations teams to strengthen the organization's overall security posture and ensure continuous protection of systems and data.

Key Responsibilities

Incident Response & Forensics

• Contribute to the development and implementation of strategies for containment and recovery, including advanced forensics and mitigating actions to contain malicious activity.
• Prioritize and manage actions during incident response, carry out analysis for the containment of cybersecurity incidents, and communicate any special requirements of high severity incidents to internal stakeholders to ensure comprehensive threat mitigations.
• Respond to incidents raised by Security Operations Analysts by following Bapco Energies' Incident Response process.
• Carry out advanced technical tasks such as forensics and malware reverse-engineering to identify threat scope and remediate the most difficult incidents to restore services.
• Facilitate remedial actions and identification of threat campaigns to strengthen the overall security posture.

Threat Detection & Hunting

• Review alerts, threat intelligence and other security data, and perform Threat Hunting to identify threats and take the appropriate steps to eliminate them.

Vulnerability & Risk Management

• Perform regular vulnerability assessments to assess the effectiveness of security systems.
• Isolate and remediate areas of weakness to ensure continuous and optimal protection for integrity and availability.

Planning & Policy Development

• Support the creation of business continuity and disaster recovery plans, including conducting disaster recovery tests, publishing test results, and making changes necessary to address deficiencies for ensuring business continuity.
• Participate in development of security plans, risk assessment plans, business continuity plans, incident response plans, and cybersecurity policies and standards.
• Assist in the design of systems security infrastructure and provide technical security guidance as needed for projects.

Automation & Tools Development

• Develop incident playbooks, custom scripts, or utility applications to process repetitive tasks and increase CDC/NOC team productivity.
• Develop use cases to support CDC operations.

Mentoring & Training

• Train and mentor CDC/NOC analysts in utilizing security tools and understanding security threats and intelligence.

Stakeholder & Vendor Management

• Interact frequently with Manager Cyber Defense Center to discuss operational issues and provide daily status updates for ongoing work, as well as other relevant compliance reports and performance metrics as required.
• Communicate regularly and align actions with all IT/OT technical groups to ensure that all systems and networks are operated securely.
• Liaise with other IT/OT groups and ITD sections and, if needed, with business units to identify and validate attempts at intrusion or compromise, and provide high quality investigation and response actions.
• Liaise closely with IT Governance section to ensure that all formally documented processes, policies, procedures, and guidelines remain commensurate with the current security threat environment.
• Act as focal point of communication with relevant service providers in the event of high severity Incident Response.
• Liaise with cybersecurity agencies to collect and exchange threat intelligence and coordinate incident response activities.
• Work with vendors to ensure any upgrades or patches to security solutions are implemented in a timely manner.

Qualifications & Experience

• Minimum 6–8 years of experience in cybersecurity, with a strong focus on security operations, incident response, threat hunting, or related domains.
• Bachelor's degree in Computer Science, Information Security, or a related field.
• Relevant industry certifications such as CISSP, CISM, or GIAC are preferred.

Skills & Competencies

• Advanced proficiency with security technologies, including SIEM platforms, intrusion detection/prevention systems, endpoint detection and response (EDR) solutions, and network security monitoring tools.
• Demonstrated ability to analyze complex security event data, identify patterns and anomalies, and make data-driven decisions to detect and respond to threats effectively.
• Deep understanding of cybersecurity principles, technologies, and best practices, with working knowledge of industry standards and frameworks such as the NIST Cybersecurity Framework and MITRE ATT&CK.
• Proven experience in leading or mentoring SOC teams or junior analysts, with the ability to coordinate and guide incident response activities.
• Strong analytical, problem-solving, and communication skills, with the ability to document findings and present technical information clearly to both technical and non-technical audiences.