Old Mutual was established in Cape Town in 1845 as South Africa's first mutual life assurance society. Our purpose is to help our customers thrive by enabling them to achieve their lifetime financial goals, while investing their funds in ways that will create a positive future for them, their families, their communities and broader society.
Degree in Information Technology, Information Systems, Cybersecurity, or a related field.
Relevant security certifications will be considered an advantage.
Minimum of 3 years’ experience within a SOC environment.
Proven expertise with SIEM solutions/tools.
Knowledge of cybersecurity threats, attack techniques, and landscape.
Strong understanding of network protocols, encryption techniques, and application/database/cloud security.
Excellent analytical and problem-solving skills.
Create, maintain, and implement detailed documentation and maintain standard operating procedures.
Strong communication skills and ability to work collaboratively in a dynamic team environment.
Old Mutual Insure is seeking a Level 2 SOC Analyst to assist in building out our monitoring and detection capability. In this critical role, you will leverage your extensive experience and skills in security operations to safeguard our digital assets. Expertise in SIEM solutions/tools is a key requirement for this role, and your expertise in this area will be pivotal in our continuous efforts to enhance our security posture.
Responsibilities
Utilize Microsoft Sentinel to monitor security alerts and perform in-depth analysis of complex threats
Analyze complex security alerts and incidents to determine their severity and impact, ensuring timely and accurate response actions.
Collaborate with Tier 1 analysts and other cybersecurity teams to resolve security incidents efficiently
Provide expert analysis and evaluation of security incidents to determine root causes and propose system adjustments
Consolidate data through alert triage, providing necessary context before escalating to Operations and Security Engineering Teams for deeper analysis.
Produce detailed incident reports and briefings for both technical and non-technical stakeholders
Apply the MITRE ATT&CK framework for anomaly analysis and conduct additional analysis using correlation rules and SIEM alerts.
Document and report incidents, ensuring that all activities are recorded and compliant with industry standards.
Participate in continuous improvement initiatives to enhance the tools and processes used by the SOC.
Participate in cybersecurity awareness training initiatives and contribute to the development of best practices for threat detection and mitigation
Able to build strong interpersonal relationships with the SOC team, IT teams, vendor teams and customer stakeholders.
Skills
Computer Literacy, Database Administration, Database Management Systems (DBMS), Database Queries, Data Controls, Document Management, Executing Plans, Expertise Management System, Knowledge Management, Metadata Management, Object-Oriented Database Management System (OODBMS), Office Systems, Oral Communications, Policies & Procedures, Test Case Management
Competencies
Collaborates
Communicates Effectively
Decision Quality
Ensures Accountability
Manages Complexity
Optimizes Work Processes
Plans and Aligns
Tech Savvy
Education
Bachelor of Commerce (BCom): Information Technology (Required), NQF Level 5 - Higher, Advance or Occupational Certificate or equivalent
20 Initiatives to Boost Employee EngagementAre you struggling with improving employee engagement at work? This article covers everything from better communication to building a strong workplace culture.
30 Common Interview Mistakes to AvoidThis piece examines 30 of the most common mistakes applicants make at interviews, so you know how to better avoid them.