Purpose of Job
Jobholders at this level perform their duties with minimal supervision and within established guidelines, policies, and procedures.
The role is responsible for monitoring and analyzing information security and cybersecurity operations, evaluating IT assets, analyzing identified threat intelligence, investigating security alerts and suspicious activities, and extracting actionable insights to mitigate system and network vulnerabilities. The role also contributes to developing security use cases and enhancing monitoring coverage to protect the Authority's systems, networks, and operations.
Job Resposiblites
- Monitor and analyze security alerts and events and conduct initial assessments of suspicious activities to identify malicious behavior and determine its potential impact on the Authority's systems and networks.
- Investigate and classify security alerts and suspicious cases that may pose a threat to the Authority's network and recommend appropriate preventive and mitigating actions.
- Analyze cybersecurity threat intelligence and assess relevant IT assets to identify potential risks, indicators of compromise, and system or network vulnerabilities.
- Conduct root cause analyses of security incidents and alerts and recommend improvements to security controls and monitoring mechanisms.
- Develop and enhance security use cases based on recognized best practices, emerging threats, and the Authority's operational requirements.
- Validate and optimize security use cases to ensure their effectiveness in detecting malicious or unusual activities.
Expand security event log source coverage and support the integration of additional log sources to improve threat detection capabilities.
- Comply with all applicable policies, processes, standard operating procedures, and cybersecurity requirements to ensure that activities are performed correctly and consistently.
- Support the resolution of escalated operational issues and provide guidance to less-experienced employees to ensure efficient work execution.
- Escalate complex incidents and issues to the appropriate parties to ensure they are addressed and resolved properly.
Job Details
Communication and Contacs
Education
A bachelor's degree in Computer Science, Cybersecurity, Information Security, Information Technology, or an equivalent discipline is required.
Experience
A minimum of 2 years of relevant experience in information security or cybersecurity.
Competencies
Collaboration and Communication - Developing
Customer Focus - Developing
Cybersecurity Incident and Investigation - Proficient
Enablement of Change and Innovation - Developing
Information Security - Developing
IT Operations Management - Proficient
Professionalism - Developing
Project Management - Developing
Results Oriented - Developing
Vendor Management - Developing
