Security Operations Centre Analyst II|Technology|2|252901|Professionals|Support Function|FAIS - No

about us

• Will always honour our commitments, be truthful in what we say and do, uphold high ethical and moral standards and be fair and equitable in all our dealings.
• In our owner manager culture we accept that we are the masters of our own destiny and therefore we will always take full responsibility and accountability for all our decisions and actions and never leave anything unfinished.
• Are empowered to innovate and come up with new ideas, as we value and nurture new ideas.
• We believe in and enjoy what we are doing and therefore we energetically and willingly nurture caring relationships with all our stakeholders in our exciting journey of uncompromisingly achieving our objectives.
• Respect the feelings, rights and abilities of our colleagues, clients and communities, even though they may be different from our own. We respect ourselves and our colleagues by not accepting or delivering average or poor performance. If the FNB values are congruent with your value set, and you have the necessary skills and competencies for the position advertised, then we are looking for you. Preference shall be given to suitably qualified applicants from the designated groups as defined in the Affirmative Action Act, 29 of 1998.

purpose

To lead a team of Security Operations Centre Analysts to protect the organization by pro-actively monitoring for cyber security incidents using identification, analysis, triage, and response methods To administer and configure policies on FNBs security products

experience and qualifications

• Bachelors Degree in Technical Field (Computer Science/Computer Security/Computer Networking), CEH, OHCP or CISO
Experience :

• Will always honour our commitments, be truthful in what we say and do, uphold high ethical and moral standards and be fair and equitable in all our dealings.
• In our owner manager culture we accept that we are the masters of our own destiny and therefore we will always take full responsibility and accountability for all our decisions and actions and never leave anything unfinished.
• Are empowered to innovate and come up with new ideas, as we value and nurture new ideas.
• We believe in and enjoy what we are doing and therefore we energetically and willingly nurture caring relationships with all our stakeholders in our exciting journey of uncompromisingly achieving our objectives.
• Respect the feelings, rights and abilities of our colleagues, clients and communities, even though they may be different from our own. We respect ourselves and our colleagues by not accepting or delivering average or poor performance. If the FNB values are congruent with your value set, and you have the necessary skills and competencies for the position advertised, then we are looking for you. Preference shall be given to suitably qualified applicants from the designated groups as defined in the Affirmative Action Act, 29 of 1998.

To lead a team of Security Operations Centre Analysts to protect the organization by pro-actively monitoring for cyber security incidents using identification, analysis, triage, and response methods To administer and configure policies on FNBs security products

• Bachelors Degree in Technical Field (Computer Science/Computer Security/Computer Networking), CEH, OHCP or CISO
Experience :

• In accordance with National Credit Act (NCA) candidates applying for this role will require a credit record check

• Review and analyse all alerts and respond according to prescribed processes
• Create incidents in our change management system for other teams to take remediation actions when required.
• Provide mitigation recommendations for each identified security incident where applicable
• Based on the types of alerts and actions being taken identify root causes and recommend ways to improve the protection capabilities of the organization (e.g. upload malicious URL to tools to security controls, and manage indicators of compromise)
• Update the alert/case information with closure information (All fields that are required to be updated when the alert/case is closed)
• Run, Analyse, and Interpret reports on different platforms.
• Create, configure, and deploy policies and signatures on technical security controls
• Document threat hunts and document the outcome of the hunt with recommendation if any IOCs picked up.
• Participate in Cyber Security War Rooms (Priority 1 and Priority 2 Incidents) to help analyse and protect the bank
• Responsible for logging changes to update the security products to pro-actively block potentially malicious actions (e.g. URLs, phishing emails, etc)
• Playbooks Feedback into the Detection Engineering team around tuning of playbooks or input into potential new playbooks.
• Manage the work queue, assign incidents, track progress of response to ensure benchmark turnaround times achieved and that the analysts follow documented escalation processes. Review the alert/case information with closure information.
• Complete end to end incident process ownership