Manager, Cybersecurity Analyst, Security Operations Centre

Role Summary

• We are hiring a Cybersecurity Analyst to join a 24/7 Security Operations Centre (SOC) within a banking environment. This is a junior, individual contributor role focused on continuous cyber threat monitoring, security incident analysis, and incident response support.

• The role is hands‑on and operational, suitable for candidates early in their cybersecurity career who are keen to gain exposure to real‑world cyber incidents in a regulated environment. This position requires shift work as part of round‑the‑clock security operations.

Key Responsibilities

• Perform real‑time monitoring of security alerts, logs, and events across enterprise systems

• Analyse and triage security alerts to identify potential cyber threats or suspicious activities

• Investigate security incidents involving endpoints, servers, networks, and user accounts

• Support incident response activities, including evidence collection, containment actions, and escalation

• Operate and monitor security tools such as SIEM, endpoint detection, and network security platforms

• Perform basic analysis on Windows, Linux, and Unix systems during investigations

• Understand and interpret network‑based alerts and indicators during security investigations

• Document incidents, investigation findings, and actions taken in case management systems

• Escalate confirmed or high‑risk incidents to senior analysts or shift leads following established procedures

• Participate in shift handovers and maintain clear operational communication

• Work rotating shifts, including nights, weekends, and public holidays

Requirements

• At least 2 years of experience in cybersecurity operations, IT security, system administration, or a related field

• Hands‑on working knowledge of Windows, Linux, and Unix operating systems, including basic command‑line usage and log analysis

• Basic understanding of network concepts and terminologies such as TCP/IP, ports and protocols, DNS, HTTP/HTTPS, firewalls, and network traffic flows

• Understanding of common cybersecurity threats such as malware, phishing, unauthorised access, and account compromise

• Exposure to security monitoring, SOC operations, or incident response is an advantage

• Familiarity with security tools such as SIEM, EDR/XDR, or log management platforms is preferred

• Ability to follow structured procedures and escalate issues appropriately

• Good analytical, troubleshooting, and problem‑solving skills

• Comfortable working in a 24/7 shift‑based operational environment

Skills and Attributes

• Strong interest in cybersecurity and threat investigation

• Ability to work under pressure and handle multiple alerts or cases

• Good attention to detail and documentation discipline

• Willingness to learn and develop technical skills across systems and networks

• Team player with clear communication skills