Security Operations Centre Analyst

Role Overview

As a SOC Analyst, you will monitor the Bank’s technology environment around the clock, investigating alerts and helping contain threats before they disrupt systems or customer services. Your work supports the protection of sensitive information and reliable digital banking, while contributing to regulatory compliance and stronger security detection.

Key Responsibilities

• Monitor and assess alerts from SIEM, EDR/XDR, NDR, IDS/IPS, WAF, DLP, email security and cloud security platforms.
• Triage and classify events by severity, likely impact and urgency, escalating confirmed or suspected incidents under the Bank’s response procedures.
• Investigate unusual activity using relevant endpoint, network, firewall and security-tool logs.
• Support incident containment, eradication and recovery, and preserve digital evidence in accordance with forensic and chain-of-custody practices.
• Refine detection rules, correlation logic and alert thresholds to improve coverage and reduce false positives.
• Apply relevant threat-intelligence indicators to detection content and assess whether sector or global alerts affect the Bank’s environment.
• Identify opportunities to automate repeatable SOC tasks and contribute to improvements in SOAR playbooks.
• Help track and report SOC performance using operational KPIs and KRIs.

Requirements & Qualifications

• Bachelor’s degree in IT, Computer Science, Cybersecurity or a related discipline.
• One to three years of experience in a SOC or cybersecurity operations role, at L1 or L2 level.
• Hands-on familiarity with SIEM and EDR/XDR tools, along with network security, firewall and endpoint logs.
• Experience in banking or another regulated environment is an advantage.
• At least one relevant cybersecurity certification is preferred. Examples include CEH, CHFI, CompTIA Security+, CISA, CISM or ISO 27001 Foundation.