Cyber Security CSOC Specialist

Job Title: Cyber Security CSOC Specialist Company: NAWAH (ENEC Operations) | Location: Barakah | Posting Date: 3 Nov 2025 | Requisition ID: 3303 | Status: Active Recruitment Job Purpose Monitor and respond to alerts that are triggered on security devices to protect the Barakah Nuclear Power Plant (BNPP) computing network. Provide first‐line analytical assessment within the BNPP facilities while triaging alerts to determine whether they are malicious in nature or benign. Escalate malicious alerts to the second line team for further technical investigative work. Key Activities Activity: Cyber Security Operations Centre Monitoring and Analysis Monitor Cyber Security events from various sources, including Security Information and Event Management systems, Intrusion Detection Systems/Intrusion Prevention Systems, network monitoring tools, and log files. Check for potential issues to ensure that malicious activities are mitigated or prevented. Triage alerts that are triggered by the Security Information and Event Management systems before they are raised to Tier‐2 analysts, ensuring that Tier‐2 analysts have enough information to investigate events. Investigate indicators of compromise in log management and security controls received by external and third‐party advisories to detect emerging threats. Activity: Alerts Investigation Perform an initial investigation and correlation of events triggered in the Security Information and Event Management systems and other tools within the Cyber Security Operations Centre to identify possible security threats to the environment. Identify non‐malicious false alerts and work with other stakeholders to exclude them from being triggered in the future. Assess and/or elevate the alerts raised by the tooling within the time set by the applicable Service‐Level Agreement (SLA). Activity: Security Triage Extract artefacts of interest from log data and examine them, recording all relevant information in a Security Incident ticket so that Tier‐2 analysts have all the information to efficiently and effectively assess the potential incident. Escalate alerts raised by the Security Information and Event Management systems into potential incidents for Tier‐2 analysts' confirmation. Activity: Assets and Process Monitoring Periodically check to ensure that the Critical Digital Assets (CDAs) and the plant operations network are properly monitored by comparing the lists of CDAs against actual assets that are sending logs to the Security Information and Event Management systems. Ensure that the security monitoring systems are functioning correctly and that the data shown by them is accurate by following up the events triggered by the system if an asset did not send applicable logs for a predefined period. Health, Safety, Security and Business Continuity All individuals are personally responsible for safety; follow company HSE policies, procedures and instructions; avoid complacency and continuously challenge existing conditions and activities to identify discrepancies that might result in error or inappropriate action; report any situation that could present a hazard. Follow all relevant Security policies, processes, procedures and instructions to ensure security compliance in all aspects of work. Follow all relevant Business Continuity and Resilience requirements for compliance with, and adherence to, policies, procedures and instructions related to incident response and business disruption prevention. Qualifications Bachelor's degree in Engineering or related Science. 2 years of relevant experience or equivalent as stated in the job description. Seniority level Entry level Employment type Part‐time Job function Engineering and Information Technology Industries Utilities #J-18808-Ljbffr