Security Operations Center Analyst

Lesotho·Maserumid

OtherSecurity Operations

2 views0 saves0 applied

Apply Now

Quick Summary

Requirements Summary

• Bachelor’s Degree in any of the following; Computer Systems and Networks Engineering, Computer Science, Engineering in Electronics or any other related IT qualifications.

Technical Tools

OtherSecurity Operations

Responsibilities

~1 min read

→24x7 monitoring of security systems e.g., SIEM, NDR, EDR, XDR etc., network [security] infrastructure e.g., Firewalls, Switches, Routers etc., and applications performance for any anomalies and/or misconfigurations.
→ Monitoring internal and external network traffic and system logs to identify anomalies, lateral movement, and potential breaches.
→ Performing end-to-end lifecycle of security incidents, from initial detection to final remediation and post-incident reporting.
→Performing forensic-level investigations across Windows, Linux, and macOS environments.
→Performing security research, threat hunting and analysis, to document current and predicted/future threats.
→Proactively detecting, assessing, responding to and mitigating security threats.
→Performing regular security assessments in liaison with the security team(s) e.g., vulnerability assessments, penetration testing, network security assessments etc.
→Collecting and analysing event data from security tools such as SIEM, EDR, NDR, IPSs, Firewalls etc., to confirm or rule out malicious activities on the Bank’s ICT infrastructure.
→Collaborating with the teams to security drills to test the Bank’s incident response plan/procedure.
→ Logging security incidents and resolving them timeously.

Continuously monitor security alerts from various sources (SIEM, IPSs, firewalls, endpoint security solutions, etc.).
Respond to and investigate security incidents, including containment, eradication, and recovery efforts.
Stay up-to-date with the latest cybersecurity threats and trends, and apply this knowledge to enhance detection and response capabilities.
Assist in the identification and remediation of vulnerabilities across the Bank’s IT infrastructure.
Document incidents, create detailed incident reports, and provide actionable recommendations to improve security posture.
Work closely with IT, network, and application teams to implement security measures.
Participate in the development and enhancement of security processes, playbooks, and standard operating procedures.