Cyber Security Operation Center Analyst ( Internal/External)

Role purpose:

The Position holder will be responsible for monitoring, assessing, and defending Safaricom Ethiopia Enterprise Information Systems. And will be part the Cyber Security Operation Center team who will continuously develop and investigate correlated security event feeds, escalating any identified security incidents. They are the primary contact for any suspected security incidents, working together with remediation teams, resolving incidents, and foiling Cyber Security threats against the Safaricom Brand.

Key accountabilities and decision ownership:

• Works in 24*7 shifts performing real-time monitoring of security alerts generated by various security tools deployed by Safaricom.

• Serves as a primary point of contact for reporting potential cyber security incidents.

• Validate, classify and open tickets for cyber security incidents.

• Analyze and assess security alerts and escalate to Level 2/3 analysts for further investigations and communication.

• Anticipate threats, incidents, and alerts to help prevent the likelihood of them occurring.

• Document cyber security incidents as identified by the case management process.

• Provide feedback on enhancing the operations of the cyber security operations Center.

• Respond to generated cyber security alerts within the time window as defined in procedural SLAs.

• Pick out potential intrusions from seemingly benign sets of audit logs or cyber security alerts.

• Triage (primary investigation) of detected cyber security alerts and make necessary escalation decisions.

• Ensure investigation steps are clearly documented & accurately escalated to Level 2/3 when needed.

• Escalation to appropriate teams, follow-ups and provide assistance during remediation.

• Responsible for managing & configuring security monitoring tools.

• Responsible for generating reports for managers and IT administrators to evaluate the effectiveness of current security protocols.

• Collaborate with other departments and team members to implement security procedures, methods, and best practice.

• Assist with defining, testing & operating new ways of working with new technology solutions or processes supplied to the CSOC team.

• Core competencies, knowledge, and experience:

• Knowledge and Skills:

• Network Defending

• Ethical hacking or penetration testing

• Incident response

• Digital forensics

• Reverse Engineering

• Business Know how

• Business Continuity

• Risk Management
• Telecommunications
• Good all-round experience of multiple infrastructure technologies

• Creativity and Innovation

• Finds creative ways to analyze and solve problems

• Experiments with unorthodox approaches

• Enthusiasm, curiosity, thirst for knowledge and passion for the job is required

• Working with Change

• Detailed oriented and flexible minded to contribute to the 24/7 defensive capabilities of the SOC for the overall security of the organization.

• Personal Qualities:

• Excellent interpersonal skills

• Ability to communicate technical information to non-technical stakeholders

• Genuine enthusiasm and

Must have technical / professional qualifications:

• Bachelor’s degree in computer science /electrical engineering/ software engineering/ IT Security/Information Technology

Desired

• Professional security training and certifications like CCNA, Security+, Certified SOC Analyst will have an added advantage.

How to Apply

• If you feel that you are up to the challenge and possess the necessary qualification and experience, kindly proceed to create/ update your candidate profile on the recruitment portal and then Click on the apply button. Remember to attach your resume