Latest Recruitment at Central Bank of Kenya

Job Purpose
To coordinate and support data collection, aggregation, cleaning/filtering and data analysis to generate actionable reports and respond to cyber threats.

Key Duties and Responsibilities
Technical and Operational Responsibilities

• Perform monitoring of security logs and alerts from Security Information and Events Management (SIEM) tools and other security platforms to identify potential threats.
• Perform data filtering and processing security events data from SIEM to ensure accuracy and integrity.
• Write reports and documentations detailing periodical findings of cybersecurity incidents and trends and the actions taken to avert future cyber threats.
• Reviewing cyber incident reports and performing correlation between incidents to detect suspicious patterns and anomalies.
• Collaborate with other SOC teams to provide data-driven insights to improve efficiency.
• performing Open-Source Intelligence (OSINT) collection on cyber threat actors.
• Supporting and coordinating with other incident response teams in identifying cyber-attack vectors by analyzing raw data and identifying suspicious patterns.
• Endeavour to assist and improve automation of data collection, collation and analysis to enhance efficiency.
• Prepare graphical and appealing cyber security training/awareness material.
• Manage SIEM tools and other cybersecurity management tools to perform analysis and generate actionable insights.

Other Responsibilities

• Conduct threat research
• Any other duty assigned.

Qualifications

• Bachelor’s degree in Information Technology (IT), Data Science and Statistics, Cybersecurity, Computer Engineering, Telecommunications and Information Engineering & Computer Science and/or any relevant qualification.
• Professional certification(s) in SOC Analysis (CSA), Cybersecurity, Information Security and/or CompTIA Security + or other related certifications.
• Knowledge of programming languages (Python, R), scripting/automation (Bash, PowerShell) and database query languages (SQL).
• Familiar with SIEM tools (Splunk, SolarWinds etc).
• Strong proficiency and understanding of statistics and data analysis techniques using Ms Excel or Google Sheets.
• Active membership in at least one (1) professional body.

Work Experience

• Three (3) years’ experience in a cybersecurity/SOC analysis environment.

Competencies

Technical Competencies

• Good understanding of cybersecurity concepts and protocols, cyber risk management, incident response and common cyber threats such as DoS attacks, phishing and malware.
• SOC and Data Analytical Skills to deal with large volumes of data to identify anomalies, trends and suspicious patterns.
• Knowledge in Open-Source Intelligence applications
• Attention to detail for accuracy in reporting
• Good communications skills to explain and document findings to SOC teams
• Team player in a fast-paced and dynamic work environment
• Good report writing and presentation skills.
• Have agility in learning new security analysis tools and technologies.

Behavioural/General Competencies

• Honesty and integrity
• Excellent problem-solving skills
• Organization skills
• Confidentiality
• Flexibility
• Interpersonal relations

go to method of application »

Job Purpose

• To coordinate cyber treat hunting for pro-active detection and prevention of cyber breaches in the banking sector.

Key Duties and Responsibilities

Technical and Operational Responsibilities

• Perform targeted Vulnerability Assessment and Penetration Testing (VA/PT) to identify flaws on banks’ systems.
• Write reports detailing the findings of VAPT exercises explaining the attack vectors of cyberattacks.
• Team leader during VA/PT exercises from inception to completion
• Reviewing results of VA/PT exercises before dispatch.
• Providing recommendations on fixing the issues identified during VA/PT exercises.
• Co-ordinating Open-Source Intelligence (OSINT) collection on cyber threat actors.
• Supporting and coordinating with incident response teams in identifying cyber-attack vectors.
• Incidence Response engagements on banks to ensure proper recovery and improve their incident response management.
• Prepare cyber security training/awareness material for the banking sector.

Other Responsibilities

• Conduct threat research.
• Supervises staff.
• Any other duty assigned.

Qualifications

• Bachelor’s degree in information technology, Computer Engineering, Telecommunications and Information Engineering & Computer Science and/or any relevant qualification.
• Professional certification(s) in Cybersecurity, Information Security and/or Networking or any other related field.
• Active membership in at least one (1) professional body.

Work Experience

• Two (2) years’ experience in a cybersecurity analysis environment.

Competencies
Technical Competencies

• Good understanding of Vulnerability Assessment and Penetration Testing (VA&PT) process.
• Data Analytical Skills
• Knowledge in Open-Source Intelligence applications
• Good communications Skills
• Good report writing and presentation skills.

Behavioral/General Competencies

• Honesty and integrity
• Excellent leadership skills
• Excellent problem-solving skills
• Analytical skills
• Communication skills
• Organization skills
• Confidentiality
• Flexibility
• Interpersonal relations
• Team player
• Attention to detail