Security Operations Centre Analyst

Family Bank Ltd is a financial institution in Kenya offering a range of banking products and services.

This role involves continuous 24/7 monitoring, detection, analysis, and response to cybersecurity incidents within the Bank's technology infrastructure. The analyst is responsible for protecting the confidentiality, integrity, and availability of systems, data, and digital services through intelligence-driven monitoring, incident investigation, proactive threat hunting, and structured incident response. This ensures timely threat containment, adherence to regulatory requirements, and uninterrupted delivery of customer services.

1. Monitor security alerts from various tools such as SIEM, EDR/XDR, NDR, IDS/IPS, WAF, DLP, email, and cloud security platforms.
2. Triage, analyze, and classify security events based on severity and impact.
3. Investigate suspicious activities and escalate incidents according to the Incident Response Plan.
4. Refine detection rules, correlation logic, and thresholds to minimize false positives.
5. Update detection logic with relevant threat intelligence indicators.
6. Identify opportunities for automation and support improvements to SOAR playbooks.
7. Assist in detection, containment, eradication, and recovery efforts for security incidents.
8. Preserve digital evidence in compliance with forensic and chain-of-custody standards.
9. Review threat intelligence feeds pertinent to the banking sector.
10. Evaluate the applicability of global threat alerts to the Bank's environment.
11. Contribute to SOC Key Performance Indicators (KPIs) and Key Risk Indicators (KRIs) aligned with operational performance metrics.

1. Bachelor’s degree in IT, Computer Science, Cybersecurity, or a related field.
2. 1-3 years of experience in SOC or cybersecurity operations (L1-L2 levels).
3. Proficiency with SIEM, EDR/XDR, network security, firewall, and endpoint logs.
4. Experience in banking or other regulated environments is advantageous.
5. Professional certifications are preferred, such as Certified Ethical Hacker (CEH), Computer Hacking Forensic Investigator (CHFI), CompTIA Security+, CISA/CISM, ISO 27001 Foundation, or other relevant Cybersecurity certifications.