Description:

•The incumbent will analyse current sophisticated targeted attacks by external or internal parties and prepare the cyber defence team to mitigate any cyber security threats, which the organisation may face. The incumbent will play a major role in developing “world class” cyber defence capabilities within the bank.

Responsibilities:

? Conduct Attack and Threat Analysis
? Malware Analysis
? Lead the Cyber Defence team in attack simulations
? Vulnerability research and analysis
? Further development of the SIEM
? Work closely with the Cyber Offence team
? Expand the capabilities of the Cyber Defence team

Min Requirements:

? Demonstrated experience with:
o Researching threat actors and analysing the latest threats and attacks
o Threat analysis and cyberattack methodologies, including kill-chain analysis
o Threat hunting and the development of mitigation plans
o Splunk
o Security testing tools (Nessus, Metasploit, Burp/ZAP, Kali, etc.)
o A scripting language (Python or PowerShell preferred)
o Knowledge transfer and expanding team capabilities
? Significant experience with:
o Microsoft Active Directory, SQL, SharePoint
o various operating systems (Windows and Red hat preferred)
? Advanced understanding of common network protocols, system architecture
? Familiarity with:
o cryptographic protocols and cipher suites
o Agile and DevOps models
? Proven ability to work effectively in a fast-paced environment as part of a high performance team
? Uncompromising ethics and confidentiality
? In-depth knowledge of attack methodologies used against the banking and financial sectors
? Strong technical knowledge of security architecture, tools and controls with specific demonstrated experience in proactive detection, mitigation, and resolution of advanced cyberattacks and/or threats
? In-depth knowledge of information threat hunting and analysis
? Familiarity with NIST Cybersecurity Framework, CIS controls, and industry regulatory requirements, specific to information security
? Experience with establishing/measuring security through DevOps models and automation
? Leveraging external relationships to enhance intelligence collection efforts
? Banking systems knowledge

Qualifications and Experience Required:

? Grade 12 / Matric
? Ethical Hacking Training (CEH, CPT/GPEN, OSCP)
? Cyber Intelligence Training
? A relevant tertiary qualification (BSc., BEng., etc.) - Ideal
? A relevant Information Security certification (i.e. CISSP, CISM) – Ideal
? 4+ years’ experience in Information Security
? 2+ years’ experience in Threat Intelligence or Threat Hunting
? 1-2 years’ experience in Security Incident Response
? Financial services / banking background - Ideal
? Some IT Forensics experience