Cyber Security and Threat Monitoring Specialist - SOC

About the role

The Cyber Security Operations (SOC) Specialist will monitor the bank’s security environment, triage SIEM alerts, investigate incidents, and coordinate response activities following NIST SP 800-61. The role also produces threat intelligence reports for senior leadership to enhance the organization’s security posture.

Key responsibilities

• Monitor and analyze security alerts using SIEM platforms such as Splunk, Microsoft Sentinel, and IBM QRadar.
• Perform alert triage, validation, and prioritization based on severity and business impact.
• Investigate suspicious logins, malware detections, network anomalies, and data exfiltration indicators.
• Coordinate incident response, execute containment, eradication, and recovery actions, and document lessons learned.
• Generate threat intelligence reports and dashboards for the CISO and risk committees, tracking trends, attack patterns, and incident metrics.
• Fine‑tune SIEM rules, participate in threat hunting, and develop playbooks and runbooks.
• Ensure monitoring activities comply with internal policies and banking regulatory requirements, and support audits.

Required profile

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science or a related field.
• 5‑8+ years of experience in a Security Operations Center or cybersecurity operations.
• Hands‑on experience with SIEM tools (Splunk, Microsoft Sentinel, IBM QRadar) and enterprise incident response.
• Experience in banking or financial services is highly preferred.

Required skills

• Security event analysis and log correlation.
• Knowledge of network protocols, endpoints, and attack vectors.
• Familiarity with the MITRE ATT&CK framework.
• Use of threat intelligence platforms and feeds.
• Understanding of incident response frameworks such as NIST SP 800-61.
• Proficiency with SIEM tools: Splunk, Microsoft Sentinel, IBM QRadar.