CISOC Analyst

ABOUT THE COMPANY

KCB Bank Group is East and Central Africa’s oldest and largest commercial banking and has through its history set new records becoming the No.1 Bank in the region.

JOB SUMMARY

MINIMUM POSITION QUALIFICATION REQUIREMENTSAcademic and ProfessionalEducation Bachelor’s  Degree BSc. Information Technology / Computer  Science / Cybersecurity / Engineering  (Electrical, Electronic) or related field  RQ Professional  Certifications Certified SOC Analyst (CSA)/ Certified Incident Handler (E|CIH)/ Certified Threat Intelligence Analyst (CTIA)/ Certified Information Systems Security /Professional (CISSP)/ Certified Ethical Hacker (CEH)/ PENTEST+ Security+ Certified Information Systems Auditor  (CISA) Certified Information Security Manager (CISM)  RQ Particulars  Detail  Specific Field or Qualification  Need TypeAny vendor-specific SIEM certification (Splunk, QRadar, LogRhythm, ArcSight, AlienVault, etc.)  AA  Any vendor-specific information security certification  AA Master’s Degree  MBA / MSc Cybersecurity / Information Systems Security / IT Security / IT  AA ExperienceTotal Minimum Number of Years of IT Experience Required 2 YearsDetail  Minimum No. of Years  Need TypeExperience in Cybersecurity  1  ES Experience in System/ Network/ Database or Cloud Platform Administration, or Application Development 1  DE 

RESPONSIBILITIES

Monitor user and system activity to identify suspicious activities leveraging on security systemsMonitor network activity and investigate anomalous events and traffic trendsCheck security monitoring status of systems on monitoring tools and initiate remediation of noted gapsMonitor alerts and alarms from security monitoring tools and initiate corrective actionsConfigure and fine tune security monitoring systems to make sure the bank is sufficiently protectedAdminister security tools ensuring optimal uptime and resource utilizationInvestigate suspicious user and system events and identify breaches and root cause.Mitigate intrusion attempts through proactive response to incidentsPrepare manual and scheduled reports for various stakeholdersResearch and stay up to date on technology and cybersecurity trendsDAILY RESPONSIBILITIESMonitor event logs from various systems (firewalls, email, web and DNS, databases, etc.) to identify suspicious activities or attacks, intrusions, and unusual, unauthorised, or illegal activityPerform incident drilldowns and investigations and escalate validated incidents to designated incident response teamsFollow up on security incidents with relevant support teams and ensure timely resolutionAdminister the performance, resource utilisation and overall health of the Bank’s security monitoring toolsPrepare and circulate SOC management reports and dashboards

REQUIRED SKILLS

Risk management, Security systems monitoring, Database administration, IT support

REQUIRED EDUCATION

Bachelor's degree