IT Security Operations Centre Analyst (SOC) at Co-operative Bank of Kenya

The Role

Specifically, the successful jobholder will be required to:

• Be part of a 24hr active Monitoring and analysis of the Bank’s networks for malicious activity using Security Incident and Event Management (SIEM) toolsets. This will include responding to and investigating alerts, assisting with developing new security monitoring use case, and ensuring all investigative activity is properly documented in the bank’s ticketing systems and followed up with relevant support teams.
• Conduct proactive cyber threat and compromise research and analysis. Monitoring open-source intelligence sources for potential threats against the Bank, and ensure appropriate defensive actions are taken with respect to these.
• Triage issues and escalate them to the ICT respective units and ensure that appropriate follow-up actions are taken to mitigate the exposure.
• Document all activities during an incident and providing leadership with status updates during the life cycle of the incident.
• Analyze a variety of network and host-based security appliance logs (Firewalls, NIDS, HIDS, Sys Logs, etc.) to determine the corrective or mitigation actions and escalation paths for each incident.
• Independently follow procedures to contain, analyze, and eradicate malicious activity.
• Be available, on-call, to rapidly troubleshoot any problems resulting from infrastructure changes, security breaches, or other unplanned/unforeseen circumstances.
• Assist the ICT Security team in developing and maintaining SoC documentation and processes.
• Form part of the Bank’s Security Incident Response team, assisting with whatever activities are deemed necessary by the incident leader.
• Submit period and ad-hoc reports as required by HOD

Skills, Competencies and Experience

The successful candidate will be required to have the following skills and competencies:

• Bachelor's degree in Information technology, computer science or any related field.
• CISSP CISA/CISM/CEH or other related certifications.
• 1+ years' experience as a Security/Network Administrator or equivalent knowledge.
• Technical knowledge of database, network, and operating systems security.
• Knowledge of various security methodologies and processes, and technical security solutions (firewall and intrusion detection systems).
• Knowledge of TCP/IP Protocols, network analysis, and network/security applications.

Knowledge of common Internet protocols and applications and SQL knowledge highly desirable