About the job
Are you driven by the challenge of safeguarding digital assets and combating cyber threats? At hugobank, we invite you to join our innovative cybersecurity team as a Cybersecurity Analyst. Your role will be crucial in monitoring, analyzing, and responding to security alerts, ensuring we stay ahead of evolving threats in our Digital Retail Bank (DRB) environment. You will engage in SIEM monitoring, incident management, vulnerability assessment, and compliance enforcement to uphold our security standards. If you possess expertise in threat intelligence, log analysis, and security policy implementation, this is your chance to make a significant impact in an agile and forward-thinking cybersecurity team.
Key Responsibilities
Threat Monitoring & Detection:
- Analyze SIEM alerts to identify potential security incidents.
- Conduct log analysis from various sources, including firewalls, servers, applications, and endpoint security tools.
- Refine correlation rules and use cases to enhance threat detection capabilities.
- Leverage threat intelligence to improve anomaly detection and response efficacy.
Incident Response:
- Perform initial triage and incident management to evaluate potential threats.
- Conduct thorough root cause analyses to assess the impact and scope of security events.
- Maintain comprehensive incident documentation for compliance and reporting purposes.
Vulnerability Management:
- Execute vulnerability scans and risk assessments to identify security weaknesses.
- Support penetration testing initiatives and assist in developing remediation strategies.
- Create and implement risk mitigation plans to minimize attack vectors.
Security Policy & Compliance:
- Ensure compliance with relevant regulatory security frameworks, such as PCI DSS, ISO 27001, and SBP regulations.
- Deliver security awareness training to internal teams.
- Monitor adherence to security policies and suggest improvements as needed.
Research & Continuous Improvement:
- Stay informed about emerging threats, attack methodologies, and cybersecurity trends.
- Continuously enhance SIEM correlation rules and detection processes.
- Refine security operations to improve overall efficiency.
Collaboration & Third-Party Security:
- Collaborate with internal security teams and third-party vendors to share threat intelligence.
- Work alongside IT and business units to bolster overall cyber resilience.
