ICT Security Analyst

SUMMARY:
ICT Security Operations Centre (SOC) Analyst

POSITION INFO:
The ICT Security Analyst will form part of the team responsible for protecting the ICT infrastructure and information assets, working closely with system administrators, database administrators, network teams, application teams, and security service providers. Candidates must demonstrate the following competencies: 1) Strong analytical, investigative, troubleshooting, and problem-solving skills; 2) Ability to prioritise security alerts, follow incident response procedures, maintain confidentiality, and work accurately under operational pressure; 3) Good written and verbal communication, teamwork, stakeholder engagement, and report-writing skills. 2.5 Technical Skills requirements In addition to the above competencies, candidates should have practical exposure to the following technical areas: 1) A minimum of three (3) years of relevant experience in ICT security operations, SOC analysis, security monitoring, incident response, vulnerability management, or a comparable security role. 2) Practical knowledge of SIEM platforms, endpoint security, network security, identity and access management, vulnerability scanning, and security incident handling. Knowledge of FortiSIEM will be an added advantage. Monitor security alerts, events, and logs from the Commission's security platforms, including the Security Information and Event Management (SIEM) solution. 2) Triage and analyse security alerts to identify suspicious activity, cyber threats, vulnerabilities, and potential incidents. Key Responsibilities 1. Monitor and analyse security events across endpoints, networks, servers, applications, cloud services, and other connected ICT assets. 2. Investigate alerts, validate incidents, determine impact and severity, and escalate matters through the approved incident management process. 3. Assist with threat hunting, vulnerability management, access-control reviews, malware analysis, and security configuration assessments. 4. Support incident response activities, including evidence preservation, containment, recovery, post-incident review, and corrective-action tracking. 5. Prepare clear operational reports on alerts, incidents, vulnerabilities, trends, risks, and outstanding remediation actions. 6. Promote compliance with the Commission's ICT security policies, data-protection requirements, standards, procedures, and organisational guidelines. 7.  Analysts must produce: 8. Produce Daily operational logs of alerts and incidents. 9. Produce Weekly summary reports of vulnerabilities, risks, and remediation status. 10. Post-incident reports within 48 hours of incident closure.