Assistant SOC Analyst

Britam Holdings Plc is a leading diversified financial services group, established in 1965, offering a wide range of financial products and services including banking, financial services, and insurance.

The role is responsible for monitoring, detecting, and responding to security incidents to ensure the integrity and availability of our systems and data.

1. Monitor security alerts and events using SIEM (Security Information and Event Management) tools to identify potential security incidents.
2. Conduct initial triage and analysis of security alerts to determine their validity and severity.
3. Investigate security incidents, including analyzing logs, network traffic, and endpoint data to identify indicators of compromise (IOCs) and determine the scope and impact of the incident.
4. Collaborate with senior SOC analysts and other cybersecurity teams to coordinate incident response activities and implement appropriate mitigation measures.
5. Document incident details, analysis findings, and response actions taken in incident reports and case management systems.
6. Assist in the development and implementation of security monitoring use cases, detection rules, and playbooks to enhance threat detection capabilities.
7. Support the implementation, configuration, optimization, and ongoing management of cybersecurity tools and platforms, including SIEM, EDR, email security, vulnerability management, and threat intelligence solutions.
8. Perform routine health checks, upgrades, tuning, and maintenance of security tools to ensure optimal performance and effectiveness.
9. Assist in onboarding new log sources, integrations, and security technologies into the SOC environment.
10. Stay informed about the latest cybersecurity threats, vulnerabilities, and attack techniques through continuous learning and training.
11. Participate in tabletop exercises, incident response drills, and simulations to test and improve incident response procedures and preparedness.
12. Provide support for security investigations, compliance audits, and regulatory inquiries as needed.
13. Support user cybersecurity awareness initiatives by assisting in the delivery of security awareness training, phishing simulation campaigns, and user education programs to promote a strong security culture across the organization.
14. Contribute to the overall improvement of SOC processes, procedures, and tools through feedback and suggestions.

1. Bachelor’s degree in Computer Science, Information Security, or related field.
2. Relevant certifications such as CompTIA Security+, Certified Ethical Hacker (CEH), or equivalent is a plus.
3. 1-2 years’ experience in IT related role, prior experience or internship in a cybersecurity-related role is preferred but not required.
4. Strong analytical and problem-solving skills with attention to detail.
5. Excellent communication and collaboration skills with the ability to work effectively in a team environment.
6. Demonstrate ability to learn quickly and adapt to new technologies and concepts.
7. Understanding of cybersecurity principles, threat landscape, and common attack vectors.
8. Familiarity with security tools such as SIEM, IDS/IPS, antivirus, and endpoint detection and response (EDR) solutions.