Job Summary:

The ideal candidate should hold a Bachelor’s Degree in Information Security or a related field, with a minimum of four 4 years’ experience in a full-time information security role and at least two 2 years of experience in a Security Operations Centre SOC role. Relevant professional certifications such as CISSP, CEH, or CHFI are required, with additional certifications e.g., CISM, LPT, OSCP being highly desirable. The candidate must possess advanced knowledge of IT security monitoring tools, including SIEM, SOAR, EDR solutions, and enterprise antivirus systems. Strong analytical, problem-solving, and communication skills are essential, along with the ability to work independently and as part of a team. Experience working in a higher education environment will be an added advantage.

Job Purpose:

The Senior SOC Analyst at USIU-Africa plays a pivotal role in maintaining the security of the university’s information systems. This position involves proactive monitoring, incident detection, analysis, and response to ensure that the confidentiality, integrity, and availability of IT resources are maintained at all times. The Senior SOC Analyst will work closely with other IT Division technical teams to enhance security measures and address potential vulnerabilities within the university’s digital ecosystem.

Key Responsibilities/Tasks/Duties:

Security Monitoring and Threat Detection

• Work in 24/7 rotational shifts to monitor security alerts generated by various security tools deployed within the university.
• Respond promptly to security alerts within defined procedural SLAs and policies.
• Conduct continuous monitoring to detect and mitigate potential threats.

Incident Response Support

• Investigate security incidents to determine their source, scope, and impact.
• Develop and implement incident response plans to mitigate security threats.
• Conduct vulnerability and risk assessment exercises to preemptively identify risks.
• Collaborate with internal teams to manage and remediate security breaches and incidents.

Security Tools and Technologies

• Maintain and optimize security tools, including:
  • SIEM Security Information and Event Management
  • IDS/IPS Intrusion Detection and Prevention Systems
  • EDR Endpoint Detection and Response Solutions
• Identify and correlate security events to ensure prompt response to threats.
• Continuously improve security measures based on analysis of system vulnerabilities.

Security Operations Administration

• Maintain cybersecurity asset inventories and documentation.
• Support onboarding of log sources into monitoring platforms.
• Support administration of cybersecurity platforms as assigned.

Log Analysis

• Review system logs from different sources to analyze behaviour and detect policy violations.
• Take corrective action based on log analysis insights to mitigate security threats.

Threat Intelligence Research

• Monitor and research emerging attack patterns and cyber threats.
• Stay up to date with industry best practices and trends in cybersecurity.
• Implement proactive threat intelligence measures to mitigate evolving security risks.

Compliance and Governance

• Assist in implementing incident response procedures.
• Ensure that the university’s Information Security efforts comply with relevant industry standards and regulations.
• Manage General IT Controls ITC to maintain robust security governance.

Key Relationships:

Key Internal Stakeholders:

The successful candidate will work collaboratively with the IT Division, university departments, schools, and administrative units to ensure effective security service delivery and support the institution’s strategic objectives.

Knowledge, Skills and Experience Required for the Role:

Academic Qualifications:

• Bachelor’s Degree in Information Security or a related field from a recognized university.
• Master’s Degree in Information Security or a related field will be an added advantage.

Professional Certifications:

• Relevant professional certification such as CISSP, CEH, or CHFI.
• Additional industry certifications e.g., CISM, LPT, OSCP are highly desirable.
• Membership in a recognized professional body.

Work Experience:

• Minimum of four 4 years of experience in a full-time information security role.
• At least two 2 years of experience in a Security Operations Centre SOC role.
• Experience working in a higher education environment will be an added advantage.

Technical Competencies:

• Advanced knowledge and experience in deploying and managing IT Security monitoring tools, including:
  • SIEM solutions
  • SOAR Security Orchestration, Automation, and Response
• Enterprise antivirus systems
• Endpoint Detection and Response EDR solutions
• Strong knowledge of:
  • Networks, firewalls, and intrusion detection systems
  • Web proxies, Windows, and Linux systems both on-premise and cloud-based
• Familiarity with Information Security and Privacy best practices and laws, especially within a higher education context.
• Experience with risk management frameworks, including:
  • NIST SP-800
  • ISO 27001
• NIST Cybersecurity Framework CSF

Soft Skills and Competencies:

• Strong analytical and problem-solving skills.
• Excellent written and verbal communication skills.
• Ability to work independently and as part of a team.
• Ability to present complex technical information in a clear and concise manner.
• Strong attention to detail.
• High level of integrity and professionalism.
• Willingness to learn and develop cybersecurity expertise.
• Ability to manage multiple priorities effectively.

Competencies Required for this Role:

• Strong analytical and problem-solving abilities.
• Excellent written and verbal communication skills.
• Ability to work independently and as part of a team.
• Strong attention to detail.
• High level of integrity and professionalism.
• Willingness to learn and develop cybersecurity expertise.
• Ability to manage multiple priorities effectively.
• Proficiency in security information systems and database management.
• Strong organizational and project management skills.