Sidian Bank Hiring Security Operations Centre Analyst (SOC Analyst)

JOB PURPOSE

The SOC Analyst will monitor, detect, and respond to cybersecurity threats across Sidian Bank’s infrastructure. Operating under ISO 27001, NIST, and CIS frameworks, they will analyze alerts, escalate incidents, and deliver timely reports—regardless of pressure.

This role demands flexibility to work long shifts, including nights, weekends, and public holidays, ensuring 24/7 coverage and rapid incident containment. Responsibilities include threat hunting, refining detection rules, and coordinating with internal and external teams to strengthen SOC operations.

KEY ACCOUNTABILITIES (DUTIES AND RESPONSIBILITIES)

• • Security Monitoring & Incident Response (40%): Continuously monitor Sidian Bank’s infrastructure using SIEM and other tools to detect, analyze, and respond to security incidents in real time. Ensure timely escalation and containment of threats.
• Threat Intelligence & Rule Tuning (20%): Refine detection rules, validate log sources, and integrate threat intelligence feeds to improve alert accuracy and reduce false positives.

• Shift Operations & Coverage (20%): Maintain 24/7 SOC coverage by working long shifts, including nights and weekends. Ensure seamless handovers and accurate documentation of incidents and actions taken.
• Reporting & Collaboration (20%): Generate incident reports and dashboards for internal stakeholders. Collaborate with IT, Risk, and external partners to support investigations and enhance SOC maturity.

Main Activities

• Monitor and analyze security events across Sidian Bank systems to detect potential threats and anomalies in real time.
• Perform initial triage, threat validation, and escalation of incidents based on severity and impact.
• Conduct threat hunting activities to proactively identify indicators of compromise and emerging attack patterns.
• Coordinate incident response efforts, including containment, eradication, and recovery, in collaboration with IT and Risk teams.
• Maintain and tune SIEM detection rules, log sources, and alert thresholds to improve accuracy and reduce false positives.
• Generate timely and actionable incident reports for internal stakeholders, even under tight timelines.
• Work extended shifts, including nights and weekends, to ensure 24/7 SOC coverage and rapid response capability.
• Collaborate with system custodians to ensure remediation of identified risks and vulnerabilities within agreed timelines.
• Research emerging threats, attacker techniques, and defensive technologies to inform SOC strategy and tooling.
• Continuously review and improve SOC processes and playbooks to support agile threat response and operational efficiency.

Technical Competencies

• • Proficient in configuring and managing SIEM platforms for real-time event correlation, alerting, and incident triage across enterprise infrastructure.
  • Skilled in firewall and web application protection technologies, including rule validation, traffic analysis, and threat mitigation.
  • Experienced in endpoint protection and antimalware systems, supporting threat detection, containment, and response workflows.
  • Working knowledge of cloud environments with emphasis on log ingestion, access monitoring, and cloud-native threat detection.
  • Familiar with Agile-aligned SOC operations and DevSecOps toolchains used for incident tracking, automation, and continuous improvement.
  • Strong analytical and reporting capabilities, enabling clear escalation paths and actionable insights for governance and risk teams.
  • Understanding of financial services systems and regulatory expectations, ensuring SOC activities align with compliance and audit requirements.
• Experience in leading SOC shifts or mentoring junior analysts, promoting accountability, knowledge sharing, and operational resilience.

Risk & Compliance:

• Attend training and maintain knowledge of and comply with all bank policies and procedures, including Anti Money Laundering/Countering Financing of Terrorism/Countering Proliferation Financing laws, rules, and regulations.
• Participate or undertake Anti Money Laundering/Countering Financing of Terrorism/Countering Proliferation Financing bank programs regularly, e.g., taking attestations, self-assessment tests, filling in compliance questionnaires as required.
• Comply and not to knowingly participate or assist in any violation of Anti Money Laundering/Countering Financing of Terrorism/Countering Proliferation Financing laws, rules, regulations or internal policies, procedure and guidelines.
• Report suspected money laundering cases to their respective heads of units or to the Money Laundering Reporting Officer as soon as such incidents occur immediately with a clear basis of suspicion.  
• Avoid Misrepresentation and Malicious Reporting – knowingly making a false, fictitious or fraudulent representation e.g. statement, report, document.
• Avoid Tipping Off customers being investigated so as not to knowingly prejudice an investigation by disclosing information.
• Not provide advice or other assistance to individuals who attempt to violate or avoid Anti Money Laundering/Countering Financing of Terrorism/Countering Proliferation Financing laws, rules, regulations or corporate policies.
• Respond to all AML/CFT/CPF queries when requested by Compliance Unit to allow the bank to comply with the requirements of The Anti-Money Laundering and Combating Financing of Terrorism Amendment Act.
• Co – operate fully with regulators and law enforcement agents and make available required documents and information.

DECISION MAKING AUTHORITY

• Operational – Solution Design dependent on CRs/BRDs assigned
• Strategic – Solution structuring to ensure ease of implementing future enhancements

ACADEMIC BACKGROUND

• A Bachelor’s degree in Computer Science, Information Technology, or related field.

WORK EXPERIENCE

• Minimum of 3 years’ working experience in Information Systems Security, including areas such as ethical hacking, vulnerability assessments, ICT audits, and system implementation reviews.
• Minimum of 2 years’ working experience in networking and operating systems, with exposure to both proprietary and open-source platforms. 
• Prior involvement in technical security assessments or audit support functions that enhance incident response and threat validation capabilities. 
• Cross-functional understanding of infrastructure and system-level configurations, contributing to more effective log analysis and root cause investigations.

SKILLS & COMPETENCIES

• Ability to use specialized tools and software to analyze, detect, investigate, and report on vulnerabilities and threats across enterprise environments.
• Knowledge and experience with key IT security products and controls, including event monitoring, data activity monitoring, endpoint protection, firewall management, and patch lifecycle oversight.
• Prior exposure to IT security operations within financial institutions, with an understanding of sector-specific risks and regulatory expectations.
• Keen attention to detail with a time-conscious approach, ensuring accuracy and responsiveness in high-stakes environments.
• Proven ability to perform under pressure in competitive and dynamic operational settings, maintaining composure and effectiveness during incident response and escalation.

PROFESSIONAL CERTIFICATION – ADDED ADVANTAGE

• ITIL Foundation
• Possess at least one security certification such as CEH (Certified Ethical Hacker); SSCP (Systems Security Certified Practitioner); OCSP (Offensive Security Certified Professional); CompTIA Security+

Apply