CISOC Analyst

KEY RESPONSIBILITIES

• Monitor user and system activity to identify suspicious activities leveraging on security systems. 
• Monitor network activity and investigate anomalous events and traffic trends   
• Check security monitoring status of systems on monitoring tools and initiate remediation of noted gaps. 
• Monitor alerts and alarms from security monitoring tools and initiate corrective actions 
• Configure and finetune security monitoring systems to make sure the Bank is sufficiently protected 
• Administer security tools ensuring optimal uptime and resource utilization 
• Investigate suspicious user and system events and identify breaches and root cause. 
• Mitigate intrusion attempts through proactive response to incidents. 
• Prepare manual and scheduled reports for various stakeholders 
• Research and stay up to date on technology and cybersecurity trends 

DAILY RESPONSIBILITIES

• Monitor event logs from various systems (firewalls, email, web and DNS, databases, etc) to identify suspicious activities for attacks, intrusions, and unusual, unauthorised, or illegal activity. 
• Perform incident drilldowns and investigations and escalate validated incident to designated incident response teams. 
• Follow up on security incidents with relevant support teams and ensure timely resolution. 
• Administer the performance, resource utilisation and overall health of the Bank’s security monitoring tools. 
• Prepare and circulate SOC management reports and dashboards.

MINIMUM POSITION QUALIFICATION REQUIREMENTS

Academic and Professional 

Education 

• Bachelor’s  Degree  BSc. Information Technology / Computer Science / Cybersecurity / Engineering  (Electrical, Electronic) or related field  RQ 

Professional  Certifications 

Information security certifications including, but not limited to:

• Certified SOC Analyst (CSA)
• Certified Incident Handler (E|CIH)
• Certified Threat Intelligence Analyst (CTIA)
• Certified Information Systems Security Professional (CISSP)
• Certified Ethical Hacker (CEH)
• PENTEST+
• Security+
• Certified Information Systems Auditor (CISA)
• Certified Information Security Manager (CISM) AA

Particulars  Detail Specific Field or Qualification  Need Type

• Any SIEM certification such as those from Splunk, IBM QRadar, LogRhythm, ArcSight, AlienVault, etc. AA  
• Any vendor-specific information security certification such as those from Palo Alto, Cisco, etc. AA 
• Master’s Degree  MBA / MSc Cybersecurity / Information 
• Systems Security / IT Security / IT  AA 

Experience

• Total Minimum Number of Years of IT Experience Required   3

Detail  Minimum No. of Years  Need Type

• Experience in Cybersecurity 2 ES 
• Experience in System/ Network/ Database or 
• Cloud Platform Administration, or Application Development  1 DE