Cyber Security Threat and Incident Analyst-1

Cyber Security Threat and Incident Analyst-1

Old Mutual Limited

Old Mutual Limited (OML) is a premium African financial services group that offers a broad spectrum of financial solutions to retail and corporate customers.

We are seeking a highly motivated and skilled Cyber Security Threat and Incident Analyst to join our dynamic cyber defence team within a new and innovative digital banking organization. Reporting to the Cyber Defence Lead, this role focuses on protecting the organization’s digital ecosystem by identifying, assessing, and responding to security threats. The role involves working closely with our Managed Detection and Response (MDR) partner to ensure timely threat detection and effective incident management.

Responsibilities and Key Result Areas

1. Threat Monitoring and Identification
   • Collaborate with the MDR partner to monitor and analyse security alerts from SIEM, EDR, AWS and other security tools.
   • Validate and triage security incidents to assess the potential impact on the organization.
   • Stay updated on the latest threat intelligence and integrate relevant findings into threat detection processes.
2. Incident Response
   • Lead initial response efforts for identified security incidents, including containment, eradication, and recovery.
   • Support incident investigations by gathering evidence and maintaining accurate documentation.
   • Develop and maintain incident playbooks to enhance response efficiency.
3. Collaboration and Reporting
   • Act as the primary point of contact between the internal team and the MDR partner for threat and incident-related activities.
   • Provide regular updates to the Cyber Defence Lead and other stakeholders on incident status and emerging threats.
   • Generate detailed incident reports and metrics to support post-incident reviews and ongoing improvement efforts.
4. Continuous Improvement
   • Participate in threat-hunting exercises to proactively identify vulnerabilities and risks.
   • Recommend and implement enhancements to security tools and processes based on incident analysis and lessons learned.
   • Support the organization’s compliance and regulatory requirements by ensuring adherence to cybersecurity policies and standards.

Requirements

1. Educational Qualifications
   • Bachelor’s degree in Cybersecurity, Information Technology, or a related field.
   • Relevant certifications such as CEH, GCIA, GCIH, or equivalent are highly desirable.
2. Experience
   • 3+ years of experience in a cybersecurity role, with a focus on threat analysis and incident response.
   • Experience working within environments supported by an MDR partner is an advantage.
   • Strong understanding of digital banking security challenges and cloud-based architectures like AWS and Azure is desirable.
3. Technical Skills
   • Proficiency in using SIEM platforms, EDR tools, and threat intelligence solutions.
   • Knowledge of security frameworks such as MITRE ATT&CK, NIST CSF, or ISO 27001.
   • Familiarity with cloud security best practices, particularly for AWS and Azure.
4. Personal Attributes
   • Strong analytical and problem-solving skills.
   • Excellent communication and collaboration abilities.
   • Proactive mindset with a passion for staying ahead of emerging threats.

The appointment will be made from the designated group in line with the Employment Equity Plan of Old Mutual South Africa and the specific business unit.

Closing Date: 28 January 2025, 23:59