SOC Supervisor

The SOC Supervisor is responsible for supervising the Security Operations Center (SOC) analysts and ensuring continuous monitoring of security events across the Bank’s digital banking infrastructure. The role involves overseeing threat detection, alert triage, incident investigation, and escalation processes to ensure timely response to cybersecurity threats affecting banking systems, cloud infrastructure, and payment platforms.

• Supervise SOC analysts responsible for monitoring security alerts and security telemetry.
• Ensure continuous 24/7 monitoring of SIEM alerts and security monitoring platforms.
• Manage alert triage processes, investigation workflows, and escalation procedures.
• Analyze security alerts generated from:

• SIEM platforms
• EDR/XDR solutions
• Network security tools
• Cloud security monitoring tools

• Identify indicators of compromise (IOCs) and suspicious activities across systems.
• Lead initial investigation and containment of cybersecurity incidents.
• Escalate high-severity incidents to the Deputy CISO and incident response team.
• Maintain incident documentation, investigation records, and root-cause analysis reports.
• Develop and maintain SOC playbooks for common attack scenarios, including:

• Phishing attacks
• Malware infections
• Account compromise
• Insider threats
• Distributed denial-of-service (DDoS) attacks

• Utilize threat intelligence feeds to improve detection capabilities.
• Update SIEM correlation rules and alert thresholds to reduce false positives and improve detection.
• Ensure monitoring coverage across critical infrastructure including:

• Core banking systems
• Digital banking platforms
• Payment systems
• Cloud infrastructure
• Network devices
• Endpoint security tools

• Prepare SOC operational reports including:

• Security incidents summary
• Threat trends analysis
• False positive rates
• Incident response time metrics

• Support continuous improvement of SOC operations and threat detection processes.

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, or Information Technology.
• 5-8 years of experience in cybersecurity operations.
• Minimum 2-3 years of experience working in a SOC environment.
• Hands-on experience with SIEM, EDR/XDR, threat monitoring, and incident response tools.
• Experience in banking, fintech, or financial services environments preferred.