Networks & Security Officer

Key Responsibilities

• Security Testing: Carry out internal and external penetration tests on Sacco’s platforms and innovate new red teaming techniques.
• Security Awareness: Conduct awareness campaigns for staff and stakeholders on cyber security matters.
• Asset Management: Collaborate with information security functions to maintain records of all data assets and exports.
• Reporting & Analysis: Produce accurate, interactive information security reports with associated mapping and dashboards; provide research and incident analysis on a weekly basis.
• Network Monitoring: Participate in 24-hour active monitoring of Sacco networks for malicious activity through SIEM reporting, including investigating alerts and developing new use cases.
• Threat Research: Conduct proactive cyber threat research and analysis using open-source intelligence to ensure appropriate defensive actions are taken.
• Log Analysis: Analyze network and host-based security appliance logs (Firewalls, IPS, NIDS, HIDS, Sys Logs) to determine mitigation actions.
• Incident Management: Independently follow procedures to report, contain, analyze, and remediate security incidents.
• Infrastructure Support: Be available on-call to troubleshoot problems resulting from infrastructure changes, security breaches, or unforeseen circumstances.
• ICT Support: Offer first-level ICT user support and administration of various Sacco systems.

Requirements

• Education: Bachelor’s degree in Information Technology, Computer Science, or its equivalent.
• Experience: At least three (3) years’ experience in system security and administration.
• Technical Competence: Demonstrated competence in Cyber Security through CTFs or learning platforms.
• Certifications: CISSP, CISA, CISM, CEH, Certified SOC analyst (CSA), Security+, Network+, CCNA, SSCP, or other related certifications.
• Technical Knowledge: Deep understanding of database, network, and operating system security; knowledge of TCP/IP Protocols and network analysis.
• Tools: Knowledge and experience using SIEM tools, intrusion detection/prevention systems, firewalls, and endpoint logging.
• Desirable Skills: Proficiency in Wireshark, PowerShell, Python, and SQL knowledge is highly desirable.

Personal Attributes

• Excellent communication and interpersonal skills.
• Decision-making and problem-solving skills.
• Innovation, creativity, and project management skills.
• Ability to work independently and within a diverse team environment.