Apply now »

Information Security Analyst

HQ

Job Details

Job Title:

Information Security Analyst

Section:

Information Security

Functional Level:

Entry

Department:

Information Security

Sector

Information Security

Reporting Lines

Reporting Lines:

Reports directly to:

Information Security Section Head

Job Purpose

Handle the daily operations of the Information Security function.

Job Responsibilities

  1. Perform security investigations and incident response of cyber security events as part of a highly available Security Operation Center (SOC)
  2. Administration of security systems (e.g. SIEM, EDR, FIM, Security Scanners)
  3. Provide analysis and trending of security log data from numerous heterogeneous security devices.
  4. Collaborate with Business Partners in Risk & Fraud on cases, providing technical investigative capabilities.
  5. Detect incidents through proactive "hunting" analysis of security-relevant data sets.
  6. Investigate host and network forensics, network traffic, malware analysis, and other related tasks required during security incident response workflows.

.

KPIs (Key Performance Indicators)

  • Number of systems with known vulnerabilities. 35%
  • Number of days to deactivate former employee credentials. 30%
  • Frequency review of the third-party accesses. 25%
  • Reporting 10%

Competency Model

Core Competencies

Level

  1. Working Strategically
  2. Customer Orientation
  3. Critical Thinking
  4. Agility 
  5. Innovation
  6. Leadership

1
2
1
2
2
1

Technical competency level

Technical Competencies

Level

  1. Web Development Languages 
  2. Web frameworks 
  3. Database Administration
  4. Open Source Security Testing Methodology 
  5. Open Web Application Security Project 
  6. Technical writing

B
B
B
B
B
B
B

Specifications: Qualifications, Experience, skills

Specifications (Qualifications, Experience and Skills):

Education                   

Specialization:

  • Minimum of a bachelor's degree or equivalent in information technology, computer science or related field.
  • Good experience in threat management, incident response and threat hunting.
  • Excellent Scripting skills (bash, python, Perl, PowerShell).
  • Hands-on experience in IT security systems such as: "SIEM, EDR, Threat Intelligence Platforms, Security Scanners and Vulnerability Management, Identity Management, FIM."
  • Direct experience in Security Operations Center work with Network Events, Threat, and/or Intel Analysis.
  • Knowledge of various security methodologies and processes, technical security solutions (firewall and intrusion detection systems), and Internet protocols and applications.
  • Requires theoretical knowledge of information systems security standards and practices (e.g., access control and system hardening, system audit and log file monitoring, security policies, and incident handling).
  • SANS, (ISC)², eLearnSecurity, and Ec-council certifications is a plus.

Experience                 

  • Minimum 2 years of relevant experience.

Conditions of Employment

  1. Days Off: 2 Days/Week
  2. PPEs / Health, Safety, and Environment requirements: No
  3. Working Days: 5 Days/week
  4. Working Environment: 98% standard office work & 2% out of office.
  5. Working Hours : From 9:00 AM till 5 PM.

Apply now »