Job Description
Are you passionate about cyber threat detection and response? We are seeking a Cybersecurity Analyst to monitor, analyze, and triage security alerts, ensuring a proactive defense against evolving threats in a Digital Retail Bank (DRB) environment. This role involves SIEM monitoring, incident handling, vulnerability management, and compliance enforcement to maintain the highest security standards. If you have experience in threat intelligence, log analysis, and security policy implementation, this is the perfect opportunity to contribute to a dynamic and cutting-edge cybersecurity team.
Responsibilities
- Threat Monitoring & Detection:
- Monitor and analyze SIEM alerts to detect potential security incidents.
- Conduct log analysis from firewalls, servers, applications, and endpoint security tools.
- Develop and refine correlation rules and use cases to improve threat detection.
- Utilize threat intelligence sources to enhance anomaly detection and response.
- Incident Response:
- Perform initial triage and incident handling to assess potential threats.
- Conduct root cause analysis to determine the impact and scope of security events.
- Maintain detailed incident documentation for compliance and reporting purposes.
- Vulnerability Management:
- Perform vulnerability scanning and risk assessment to identify security gaps.
- Support penetration testing efforts and assist in remediation strategies.
- Develop and implement risk mitigation plans to reduce attack vectors.
- Security Policy & Compliance:
- Ensure adherence to regulatory security frameworks (PCI DSS, ISO 27001, SBP regulations).
- Conduct security awareness training for internal teams.
- Monitor compliance with security policies and recommend necessary improvements.
- Research & Continuous Improvement:
- Stay updated on emerging threats, attack techniques, and cybersecurity trends.
- Continuously optimize SIEM correlation rules and fine-tune detection mechanisms.
- Enhance security operations processes to improve efficiency.
- Collaboration & Third-Party Security:
- Work closely with internal security teams and third-party service providers to correlate threat intelligence.
- Collaborate with IT and business units to enhance overall cyber resilience.
