Senior Cyber Security Analyst

Description:

ROLE PURPOSE:
Reporting to the Senior Manager – Cyber Security Operations, the Senior Cyber Security Analyst assesses the damage and impact caused by information security events and incidents, developing and managing the implementation of incident containment and recovery plans. This role collaborates with other information security teams and departments to ensure proper and timely responses to all information security incidents and includes oversight of Cyber Security Analysts.

KEY METRICS:
% of information security incidents and events closed within SLAs and OLAs
% of incidents escalated
% of recurring incidents
% of incident root causes addressed

Key Accountabilities of the Role:
Oversee monitoring activities of Cyber Security Analysts.
Validate incidents categorized as false positives.
Triage incidents and classify them according to criticality.
Liaise with the Incident Response team for coordinated activities.
Escalate incidents within defined SLAs.
Review evidence and conduct investigations to assess damage.
Perform intrusion scope and root cause analysis.

Additional Responsibilities:
Participate in incident eradication and recovery activities.
Develop or identify eradication plans.
Manage turnover of security incidents and coordinate response efforts.
Provide feedback to SIEM developers on false positive/negative rates.
Stay updated on the latest trends and threats in cybersecurity.
Collect IOCs and threat intel data to enhance detection capabilities.

Specialist Skills / Technical Knowledge Required:
Knowledge of security technologies, processes, and systems/applications.
Familiarity with banking processes and standards.
Knowledge of ISO 27001, NESA, PCI DSS, SWIFT, and other information security regulations.
Strong understanding of information security monitoring and incident handling technologies.
Proficient in fundamental security and network concepts (Operating systems, intrusion detection, TCP/IP).

Previous Experience:
5+ years in information security incident response within large banks or financial institutions.
Experience in security monitoring and incident response techniques.
Familiarity with handling information security incidents.
Experience in the selection and deployment of incident response tools.
Proven track record in developing incident response programs and strategic improvements.
Experience in CIRT, CSIRC, or SOC environments.