About the Role
The role involves monitoring and responding to security alerts within the Barakah Nuclear Power Plant (BNPP) computing network. The primary responsibility is to provide first-line analytical assessments, triaging alerts to determine their nature—whether malicious or benign—and escalating any malicious alerts to the second line team for further technical investigation.
Ready to apply for roles like this?
Unlock the company name and direct application link. Subscribers get instant access to fresh jobs across Dubai, Abu Dhabi and Riyadh, many with visa support.
Unlock employer & apply directly
Key Activities, Responsibility & Accountability
Cyber Security Operations Centre Monitoring and Analysis
- Monitor Cyber Security events from various sources, including Security Information and Event Management (SIEM) systems, Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), network monitoring tools, and log files analysis to identify potential malicious activities.
- Triage alerts triggered by the SIEM systems, providing Tier-2 analysts with sufficient information for further investigation.
- Investigate indicators of compromise in log management and security controls based on external and third-party advisories to detect emerging threats.
Alerts Investigation
- Perform initial investigations and correlate events triggered in the SIEM systems and other tools to identify possible security threats.
- Identify non-malicious false alerts and collaborate with stakeholders to prevent future occurrences.
- Assess and escalate alerts as per the applicable Service-Level Agreement (SLA).
Security Triage
- Extract relevant artefacts from log data and document pertinent information in a Security Incident ticket, facilitating efficient assessment by Tier-2 analysts.
- Escalate alerts from the SIEM systems into potential Incidents for confirmation by Tier-2 analysts.
Assets and Process Monitoring
- Regularly verify that Critical Digital Assets (CDAs) and the plant operations network are adequately monitored by comparing asset lists against actual logs sent to the SIEM systems.
- Ensure that security monitoring systems function properly and that reported data is accurate by following up on system-triggered events involving assets that have not sent logs within a predefined period.
Health and Safety, Security, and Business Continuity
- Take personal responsibility for safety; adhere to company HSE policies and procedures while continuously reviewing and challenging existing conditions to identify discrepancies that may result in errors.
- Follow all relevant security policies and procedures to ensure compliance and protect corporate assets.
- Adhere to Business Continuity and Resilience requirements, ensuring effective planning and response to incidents or business disruptions to maintain critical processes with minimal impact.
Qualifications
- Bachelor's degree in Engineering or related Science.
Experience
- Minimum of 2 years of relevant experience or equivalent as stated in the Job.
