Job Description
Hello Future SOC Analyst IIWelcome to FNB, the home of the #changeables. We design for the shapeshifters and deliver products and services that make us incredibly proud of people that make it happen.
As part of our talent team, you will be surrounded by unique talents, diverse minds, and an adaptable environment that lives up to the promise of staying curious. Now’s the time to imagine your potential in a team where experts come together and ignite effective change.
Overview of the role and requirements:
- To protect the organization by pro-actively monitoring for Cyber Security Events. This includes the Identification, Analysis, Triage and Response
- Administer and Configure Policies on FNB’s Security Products.
- Guidance of L1 SOC Analyst’s
What you will need:
- Minimum 2 years’ experience in a SOC Analyst Role (SOC operations experience)
- Security Product Knowledge
- Cisco Products (AMP, Stealthwatch)
- Microsoft Products (Azure, ATA and ATP, BitDefender)
- Understanding of common network services (web, mail, DNS, authentication)
- Knowledge of host-based firewalls, Anti-Malware
- General Desktop OS and Server OS knowledge
- TCP/IP, Internet Routing, UNIX / LINUX & Windows
- Understanding of modern malware threats
- SANS Knowledge
- Familiarity with system log information and what it means
- Threat Intelligence Research
You will be responsible for:
Incident Monitoring and Response
- Review and analyse all alerts and respond according to prescribed processes
- Guidance of L1 SOC Analysts
- Create incidents in our change management system for other teams to take remediation actions when required.
Remediation Recommendations
- Provide mitigation recommendations for each identified security incident where applicable
- Based on the types of alerts and actions being taken identify root causes and recommend ways to improve the protection capabilities of the organization (e.g. upload malicious URL to tools to security controls, and manage indicators of compromise)
Case Management
- Update the alert/case information with closure information (All fields that are required to be updated when the alert/case is closed)
Reporting
- Run, Analyse and Interpret reports on different platforms.
Manage and Administer Technical Controls
- Create, configure and deploy policies and signatures on technical security controls
Perform Threat Hunts
- Document the outcome of the hunt with recommendation if any IOC’s picked up.
Oversight of Level 1 SOC Analysts
- Assisting L1’s during investigations and review the recommendations made
- Guiding and Mentoring of Level 1 SOC Analysts
Participate in Cyber Security War Rooms (P1 and P2 Incidents)
Responsible for logging changes to update the security products to pro-actively block potentially malicious actions (e.g. URL’s, phishing emails, etc)
Playbooks
- Feedback into the Detection Engineering team around tuning of playbooks or input into potential new playbooks
We can be a match if you have:
- Bachelor's Degree in Technical Field (Computer Science/Computer Security/Computer Networking)
- Enterprise Security Product Certification
- Analysis and Attention to Detail
- Problem Solving
- Time and Self-Management
- Knowledge Sharing
- Drive and Results Orientated
- Teamwork
- Self-motivated with ability to work without supervision
- Outcomes Driven (“Can Do” Attitude)
You will have access to:
- Opportunities to network and collaborate.
- Challenging Work.
- Opportunities to innovate.
#Post
#FNB
#LI-NN2
Are you interested to take the step? We look forward to engaging with you further. Apply now!
Job Details
Take note that applications will not be accepted on the below date and onwards, kindly submit applications ahead of the closing date indicated below.
28/08/25
All appointments will be made in line with FirstRand Group’s Employment Equity plan. The Bank supports the recruitment and advancement of individuals with disabilities. In order for us to fulfill this purpose, candidates can disclose their disability information on a voluntary basis. The Bank will keep this information confidential unless we are required by law to disclose this information to other parties.
Report job
