The Job

The Security Analyst is responsible for monitoring, reviewing and responding to alerts generated from the various security solutions in the Bank. This role will come under the Security & Intelligence Operations function, reporting to the Regional Lead (Security & Intelligence Operations).

Key Responsibilities:

• Monitor, review and respond to alerts generated from the various security detection tools and case management systems in accordance with established service level agreements and objectives (SLA & SLO) .
• Recommend triage actions and maintenance of runbooks and playbooks.
• Investigate and escalate security incidents based on the severity level for each event/incident within SLA & SLO.
• Effectively communicate and document investigation progress, findings, opportunities and challenges.
• Collate, analyze and prepare reports on security event metrics.
• Assess, recommend, develop and fine-tune detection capabilities to improve the effectiveness of the various security programs in place
• Stay current with the latest cyber threats, attacks, and vulnerabilities.

Requirements

• Relevant security or technical certifications will be advantageous including but not limited to (ISC)2, SANS, OSCP.
• Minimum 1-3 years of experience in an information security role and related experience.
• Broad understanding of IT security concepts and defense-in-depth practices.
• Hands-on experience in two or more of the following areas will be advantageous: Threat Detection & Monitoring / Threat Intelligence Analysis / Threat Hunting / Detection Engineering
• Initial inquiry into problem statements/incident leads, analytical approach, hypothesis generation and testing with investigative security tools.
• Experience in EDR, SIEM, SOAR, & TIP is required.
• Knowledge/experience in programming and scripting (python, bash or powershell) is advantageous.