Security Operations Analyst

Position Summary

The Security Operations Analyst is a pivotal role in safeguarding the organisation's digital infrastructure. The candidate's mission is to protect all our digital assets from cyber threats.

Key Responsibilities

The Security Operations Analyst will be part of the team that deliver the following key responsibilities:

1. Security Event Monitoring
   1. Review security logs, alerts, and system events to detect anomalies or signs of unauthorised access.
   2. Analyse logs from firewalls, intrusion detection/prevention systems, and other security tools to identify patterns or security behaviour.
   3. Prioritise and investigate security incidents based on severity and impact.
   4. Adjust alert thresholds to reduce false positives and improve detection accuracy.
   5. Monitor user activity for deviations from normal behaviour.
2. Malware Analysis and Email Security
   1. Assess and respond to malware incidents.
   2. Ensure that malware has been thoroughly eradicated from end-points and no lateral movement has occurred.
   3. Investigate suspicious emails and phishing attempts.
3. Threat Detection and Analysis
   1. Analyse logs, network traffic, and security data to detect and respond to cyber threats.
   2. Search for indicators of compromise or signs of advanced persistent threats.
   3. Collaborate with incident response teams to mitigate risks promptly.
4. Security Tools Operations
   1. Configure, monitor and maintain various security tools to ensure up-to-date protection
   2. Conduct regular vulnerability scans
   3. Manage Identify Access Management systems
   4. Assist in providing complete and thorough responses to external and internal audit RFIs.
5. Incident Response and Mitigation
   1. Execute incident response procedures during security incidents.
   2. Coordinate with cross-functional teams to contain and remediate threats.
   3. Produce post-incident reviews and identify areas for improvements.
6. Cyber Threat Intelligence
   1. Stay informed about emerging threats and vulnerabilities.
   2. Leverage threat intelligence sources to enhance our security posture.
7. Operational Readiness
   1. Participate in cyber exercises and simulations to improve readiness.
   2. Advocate for security

Requirements

• Diploma or degree in Computer Science, Computer Engineering or Information Security related fields.
• At least 3 years of working experience in IT Security Operations and Security Operations Centre.
• Relevant certifications such as CISSP, CISM, GSOM, SSCP, CASP+, GCIH will be a significant advantage.