Security Operations Analyst

JOB PURPOSE

To perform expert analysis of real time and historic events in order to discover security anomalies, identify violations, conduct forensic investigation and raise and manage incidents to closure, in addition to identifying system vulnerabilities and risks, detecting system risks, conducting change management security reviews and infrastructure baseline review

ACCOUNTABILITIES

Technology Security

• Perform periodic vulnerability assessments, internal and external penetration tests, infrastructure baselines compliance tests, pre-production review of applications/technical systems in order to ensure that all security requirements are incorporated
• Research patch updates for technology and evaluate information security notices issued by information systems vendors, CERT and makes recommendations to the IT Department technical staff to take precautionary measures to protect ADCB information assets

Security Operations Monitoring and Response

• Carry out day-to-day operational security monitoring, forensic analysis, incident response, data leakage monitoring, SIEM, phishing attacks and security operations support for the continuous protection of the information systems and IT infrastructure

Reporting

• Analyse data and prepare reports including generation of daily, weekly, monthly, quarterly and yearly reports that document security threats and work closely with Intra Security Departments and SOC teams to deploy preventative / mitigating controls
• Actively work on and keep records of metrics and measurement systems for KRI's to assist in the identification of weaknesses in controls and drive remediation activities

• At least 2 years of experience in a banking industry or similar environment, from a demanding service industry where employees are required to work under pressure
• Bachelor’s Degree in Computer Science or equivalent, e.g. diploma (mandatory)
• CISSP/GCIH/CHFI certifications
• Insight of system and network attack and intrusion techniques
• Knowledge of event monitoring and analysis of events presented on a Security Information Management/Event Management System (SIM/SEM)
• Understanding of general IS/IT best practices and principles are required
• Knowledge of security devices and network
• Understanding of the vulnerabilities in systems
• Knowledge and understanding of network topologies, protocols, malware, botnets, and antivirus software