Security Operations Centre (SOC) Specialist at NCBA Group

Job Purpose Statement

The SOC Specialist plays a crucial role in monitoring, detecting, and responding to cybersecurity threats and incidents. This role requires technical expertise in cybersecurity tools and processes, strong analytical skills, and the ability to operate effectively in a dynamic, high-pressure environment. This role will be specialized for incident response and will act as an escalation point for SOC Analysts

Key Accountabilities (Duties and Responsibilities)

Security Monitoring, Reporting, and Incident Management (60%):

• Monitor and analyze network traffic, system logs, and alerts to identify potential security incidents.
• Respond to cybersecurity incidents, including analysis, containment, eradication, and recovery.
• Conduct root cause analysis of security incidents to prevent future occurrences.
• Collaborate with other teams to enhance threat detection capabilities and improve overall security posture.
• Perform threat hunting activities to identify advanced threats that evade automated detection.
• Create and update incident response playbooks and standard operating procedures.
• Generate and deliver reports on SOC activities, including incident trends and key performance metrics.
• Stay informed about the latest cybersecurity threats, vulnerabilities, and best practices.
• Provide input and recommendations for improving security controls and processes.

Support Audit and Risk Activities (20%):

• Act as the focal point for all SOC reports from Audit and Risk teams.

System Security (20%):

• Conduct periodic reviews of systems within the Bank to ensure they are configured according to the Bank’s Minimum Security Standard

Job Specifications

Ideal Person Specifications:

• A Bachelor’s degree in Computer Science, Information Technology, or a related field.
• Minimum 3 years of working experience in a busy IT environment.
• Certification in a systems security or audit-related area, such as CEH, CISA, CISM, or CISSP.
• Deep interest in computing and cybersecurity.
• Excellent analytical, planning, and organizing skills.
• Familiarity with methods for ethical security hacking/penetration testing.
• Knowledge of SIEM toolsets.
• Experience in security incident detection and response.
• Familiarity with tools and techniques used by hackers.
• Excellent written and oral communication skills