Expected Profile

Primary Skill Areas

Compensation and Benefits

• Monitor and analyse real-time and historical security events using SIEM platforms to identify anomalies, policy violations, indicators of compromise, and potential cyber risks.
• Validate and triage alerts, correlate events across multiple data sources, and distinguish genuine incidents from false positives.
• Monitor data leakage indicators and support investigation of suspected data loss or unauthorised information transfer.
• Analyse phishing, malicious, and suspicious emails, including URLs, attachments, and headers, and coordinate containment actions.
• Raise, classify, prioritise, investigate, and manage cyber security incidents in line with established incident management procedures.
• Conduct forensic analysis and evidence review to determine incident scope, impact, root cause, attack path, and affected assets.
• Coordinate containment, remediation, recovery, and follow-up actions with infrastructure, application, network, endpoint, and other relevant teams.
• Maintain complete incident records, investigation notes, evidence references, actions, decisions, and closure documentation.
• Use SOAR platforms to manage incident workflows, case handling, enrichment, escalation, and response activities.
• Identify opportunities to improve detection logic, operational workflows, automation, and response efficiency.
• Liaise with internal teams to exchange information related to security incidents and obtain required technical or business inputs.
• Initiate or request changes arising from security incidents and coordinate with responsible teams to implement preventive and mitigation controls.
• Provide advisory on emerging cyber threats, attack techniques, and observed security trends relevant to the environment.
• Prepare daily, weekly, and monthly security reports documenting incidents, threats, trends, response status, and key observations.
• Maintain accurate security operations metrics and Key Risk Indicators (KRIs).
• Track agreed remediation actions and support continuous improvement of SOC monitoring, incident handling, and security controls.
• Working knowledge of security event monitoring, log analysis, correlation, and investigation using SIEM solutions.
• Working knowledge of cyber security incident handling and case management through SOAR platforms.
• Understanding of security technologies including firewalls, IDS/IPS, endpoint security, email security, DLP, web security, and network monitoring controls.
• Good understanding of network topologies, TCP/IP, common network protocols, security architecture, and traffic analysis fundamentals.
• Understanding of malware, phishing, botnets, antivirus and endpoint protection, vulnerabilities, indicators of compromise, and common cyber security terminology.
• Knowledge of the incident response lifecycle, forensic investigation fundamentals, evidence handling, and root-cause analysis.
• Ability to interpret security alerts and technical data, correlate information across multiple sources, and clearly document investigation findings.
• Basic awareness of AI-assisted investigation, summarisation, and automation use cases in cyber security, with appropriate validation and human oversight.
• Strong analytical and investigative mindset with attention to detail.
• Clear written and verbal communication for incident updates, escalations, reports, and stakeholder coordination.
• Disciplined approach to maintaining accurate incident records, metrics, evidence, and operational documentation.
• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related discipline.
• Relevant cyber security certifications preferred, such as Microsoft Security, Security+, CySA+, GCIH, GCIA, or equivalent.
• Practical experience in SOC operations, security monitoring, incident response, SIEM, and/or SOAR environments preferred.
• Experience in banking or financial services is an advantage.
• Security Incident Monitoring and Response
• Security Event Analysis and Investigation
• Digital Forensics Fundamentals
• SIEM Monitoring and Correlation
• SOAR-Based Incident Management and Automation
• Phishing and Malicious Email Analysis
• Data Leakage Monitoring
• Security Reporting, Metrics, and KRIs
• Network and Security Technology Fundamentals
• Basic AI Skills for Cyber Security Operations
• Competitive base salary with eligibility for variable pay.
• Medical insurance, group life insurance, and personal accident insurance.
• Paid leave and leave airfare.
• Preferential employee rates on loans and finance facilities.
• Staff discounts and offers.
• Children's education assistance, subject to job level eligibility.
• Flexible and remote working arrangements, subject to eligibility and job requirements.
• Access to structured learning programmes, e-learning, on-the-job training, and professional development.