Information Security Analyst

Information Security Analyst at Equity Bank Kenya

Information Security Analyst at Equity Bank Kenya

Job Description – Information Security Analyst

Purpose of the Job

The main responsibility for an Information Security Analyst includes monitoring, detecting, analyzing, and responding to cybersecurity incidents using a variety of security tools and processes. They also ensure that all computing assets are compliant with deployed security tools to ensure cyber resilient Infrastructure.

Key Responsibilities:

· Monitor security alerts and events from our SIEM and other security tools.

· analyze suspected intrusions, confirm attacks, and assess impact, escalating serious incidents per the incident response plan.

· Perform initial triage of alerts and escalate when necessary.

· Document incidents, investigations, and actions taken.

· Participate in projects and changes related to security monitoring

· Participate in implementation of FinSOC, as well as managing and monitoring FinSOC alerts.

· Work closely with IT, security teams, and other departments when issues arise.

· Participate in the development, customization, and improvement of SOC processes, playbooks, and incident handling procedures.

· Stay updated on security threats, trends, and industry best practices.

· Conduct regular vulnerability scans

· Review all computing estates’ compliance status on all cybersecurity tools and follow up remediation actions

· Any other responsibility that may be assigned by the line manager.

Qualifications:

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or related field.

• At least 1 year of experience in a cybersecurity or SOC role.

• Familiarity with SIEM tools (e.g., Logrythm, Splunk, QRadar, ArcSight, Sentinel).

• Knowledge of networking protocols, operating systems (Windows, Linux), and security technologies (firewalls, IDS/IPS, antivirus).

• Security certifications such as CompTIA Security+, CySA+, CEH, SSCP, or equivalent

• Understanding of cybersecurity frameworks (NIST, MITRE ATT&CK).

• Strong analytical and problem-solving skills.

• Ability to work in a fast-paced environment.

Working model:

• 24/7 shift-based operations (may include nights, weekends, holidays).

• Working on-site

Core competencies:

• Analytical thinking and problem-solving

• Strong attention to detail

• Ability to communicate findings clearly both in technical and non-technical terms

• Knowledge of relevant standards and regulatory requirements