Job Summary
Job Summary
Monitor, detect, analyze and respond to cybersecurity events across the Bank’s technology environment to protect the confidentiality, integrity and availability of systems, applications, data and digital services.
Support threat monitoring, threat intelligence, incident response, cyber defense operations and regulatory compliance through continuous security operations and proactive threat management.Key Responsibilities
Key Responsibilities
Monitor security alerts and events from security platforms including SIEM, EDR/XDR, NDR, IDS/IPS, WAF, DLP, email security and cloud security solutions.
Triage, analyze and classify security events according to severity, risk and business impact.
Investigate suspicious activities and escalate incidents in accordance with the Incident Response Plan.
Tune detection rules, correlation logic and thresholds to minimize false positives and improve monitoring effectiveness.
Update security monitoring and detection mechanisms using relevant threat intelligence indicators.
Identify security automation opportunities and support improvement of SOAR playbooks and workflows.
Support incident detection, containment, eradication and recovery activities during cybersecurity incidents.
Preserve digital evidence in accordance with forensic and chain-of-custody requirements.
Review and analyze threat intelligence feeds relevant to the banking industry.
Assess the applicability of global cybersecurity threat alerts to the Bank’s operating environment.
Support continuous improvement of SOC operations and cybersecurity controls.
Contribute to Security Operations Centre Key Performance Indicators (KPIs) and Key Risk Indicators (KRIs).
Prepare incident reports, findings and recommendations for management and stakeholders.Qualifications
Qualifications
Bachelor’s Degree in Information Technology, Computer Science, Cybersecurity or a related field.
Professional certification in at least one of the following areas is preferred:Experience
Experience
Minimum one (1) to three (3) years of experience in Security Operations Centre (SOC) or cybersecurity operations (adsbygoogle=window.adsbygoogle||[]).push({});roles.
Experience working with SIEM, EDR/XDR platforms, network security technologies, endpoint security tools and security log monitoring systems.
Experience in banking, financial services or other regulated industries is an added advantage.Key Competencies
Key Competencies
Security Operations Centre (SOC) Monitoring.
Cyber Threat Detection and Analysis.
Security Incident Response and Management.
SIEM Administration and Log Analysis.
Endpoint Detection and Response (EDR/XDR).
Network Security Monitoring.
Threat Intelligence Analysis.
Digital Forensics and Evidence Handling.
Security Automation and SOAR Operations.
Vulnerability and Risk Assessment.
Information Security Compliance and Governance.
Analytical Thinking and Problem-Solving Skills.
Attention to Detail and Investigative Skills.
Communication and Incident Reporting Skills.Preferred Technical Skills
Preferred Technical Skills
SIEM Platforms (Microsoft Sentinel, Splunk, QRadar, ArcSight or equivalent).
EDR/XDR Solutions (Microsoft Defender, CrowdStrike, SentinelOne or equivalent).
IDS/IPS and Network Monitoring Tools.
Web Application Firewall (WAF) Management.
Data Loss Prevention (DLP) Technologies.
Email Security and Cloud Security Platforms.
Threat Hunting and Security Analytics.
Security Incident and Event Management Procedures.