Job Summary

About our Technology & Operations Team

‍
Our Technology & Operations (T&O) team is the powerhouse for the Bank. We aim to go further, faster, to ensure we're agile and ready for tomorrow, today. Our diverse network enables us to innovate and build banking solutions that support communities to prosper. We're a place where talented people are encouraged to grow, learn, and thrive, to drive their own career journeys, to reach their full potential. 

As a Cyber Security Analyst, you’ll be at the forefront of protecting our customers’ financial assets and data by monitoring, detecting and responding to security threats across our global banking infrastructure.  

If you’re searching for a career with high visibility, a steep learning curve and the opportunity to change the future of a global business, you’ve found it. Join our Cyber Defence team and you’ll be given the resources you need to protect our most valuable assets – our people and our products. It’s a demanding job. Our security needs are broad, unique and constantly evolving. That’s why you’ll have the freedom to work autonomously and enjoy access to resources like cyber hub, our dedicated learning programme. Get ready to pioneer better, faster and safer ways to enhance our resilience against threats while keeping our business moving forward.

‍

Key Responsibilities

• Monitor, detect & respond to any potential security threats and risks to the organisation, using the available technology toolset.
• Correlate and consolidate the alerts, reports, anomalies and other intelligence sources, put the threat/risk in context, and determine event/incident urgency and priority, and initiate an appropriate response.
• Continuously improve the accuracy and relevance of the Bank’s detection tools and capabilities to keep pace with changing environments and regulatory/compliance requirements.
• Adhere to the defined security monitoring processes and procedures, and initiate improvements to them, driving maturity and relevance.
• Track and report the remediation of cybersecurity threats and risks, and provide domain expertise during remediation to the appropriate support groups.
• Track and document cybersecurity incidents from initial detection through final resolution.
• Operate within established standard operating procedures to handle security incidents.
• Research trends and countermeasures in computer/network vulnerabilities, exploits, and malicious activity.
• Support senior incident handlers during cybersecurity incident response activities.
• Perform root cause analyses and present findings to relevant stakeholders for remediation.
• Work closely with the other support groups to assess risk and provide recommendations for improving the Bank’s security posture.
• Work within a 24x7 shift model.
• Provide after-hours rotational coverage when required.

‍

‍

Skills and Experience

• Diploma or higher educational qualification in Engineering, Computer Science/Information Technology or an equivalent qualification in a relevant discipline.
• Well-versed in Cybersecurity Incident Analysis and Response and Cybersecurity Defensive Operations (Blue Team).
• Strong understanding of core Enterprise Information Technology and Computer Networking concepts (Desktop/Laptop, Mobile Device, Server, Network Device, LAN and WAN).
• Basic knowledge of selected IT Service Management (ITSM) processes (Event Management, Incident Management, Change Management, Service Assets and Configuration Management, Service Level Management).
• Exposure to Security Information and Event Management solutions, preferably Splunk ES. User Behaviour Analytics (UBA) exposure is desirable.
• Exposure to Endpoint Security and/or Endpoint Detection and Response tools, preferably Symantec.
• Demonstrated ability to work with a diverse, geographically-dispersed team.
• The following certifications are desirable but not mandatory: EC Council Certified Ethical Hacker (CEH), EC Council Certified Security Analyst (ECSA), SANS GIAC Certified Incident Handler (GCIH), CERT Certified Computer Security Incident Handler (CSIH), Axelos Information Technology Infrastructure Library (ITIL) v3 Foundation.

‍