Job Purpose:

The Senior SOC Analyst at USIU-Africa plays a pivotal role in maintaining the security of the university’s information systems. This position involves proactive monitoring, incident detection, analysis, and response to ensure that the confidentiality, integrity, and availability of IT resources are maintained at all times. The Senior SOC Analyst will work closely with other IT Division technical teams to enhance security measures and address potential vulnerabilities within the university’s digital ecosystem.

Responsibilities or duties:

• Work in 24/7 rotational shifts to monitor security alerts generated by various security tools deployed within the university.
• Respond promptly to security alerts within defined procedural SLAs and policies.
• Conduct continuous monitoring to detect and mitigate potential threats.
• Investigate security incidents to determine their source, scope, and impact.
• Develop and implement incident response plans to mitigate security threats.
• Conduct vulnerability and risk assessment exercises to preemptively identify risks.
• Collaborate with internal teams to manage and remediate security breaches and incidents.
• Maintain and optimize security tools, including: SIEM (Security Information and Event Management), IDS/IPS (Intrusion Detection and Prevention Systems), EDR (Endpoint Detection and Response Solutions)
• Identify and correlate security events to ensure prompt response to threats.
• Continuously improve security measures based on analysis of system vulnerabilities.
• Maintain cybersecurity asset inventories and documentation.
• Support onboarding of log sources into monitoring platforms.
• Support administration of cybersecurity platforms as assigned.
• Review system logs from different sources to analyze behaviour and detect policy violations.
• Take corrective action based on log analysis insights to mitigate security threats.
• Monitor and research emerging attack patterns and cyber threats.
• Stay up to date with industry best practices and trends in cybersecurity.
• Implement proactive threat intelligence measures to mitigate evolving security risks.
• Assist in implementing incident response procedures.
• Ensure that the university’s Information Security efforts comply with relevant industry standards and regulations.
• Manage General IT Controls (ITC) to maintain robust security governance.

Qualifications or requirements 

Academic Qualifications:

• Bachelor’s Degree in Information Security or a related field from a recognized university.
• Master’s Degree in Information Security or a related field will be an added advantage.

Professional Certifications:

• Relevant professional certification such as CISSP, CEH, or CHFI.
• Additional industry certifications (e.g., CISM, LPT, OSCP) are highly desirable.
• Membership in a recognized professional body.

Technical Competencies:

• Advanced knowledge and experience in deploying and managing IT Security monitoring tools, including: SIEM solutions, SOAR (Security Orchestration, Automation, and Response), Enterprise antivirus systems, Endpoint Detection and Response (EDR) solutions
• Strong knowledge of: Networks, firewalls, and intrusion detection systems, Web proxies, Windows, and Linux systems (both on-premise and cloud-based)
• Familiarity with Information Security and Privacy best practices and laws, especially within a higher education context.
• Experience with risk management frameworks, including: NIST SP-800, ISO 27001, NIST Cybersecurity Framework (CSF)

Soft Skills and Competencies:

• Strong analytical and problem-solving skills.
• Excellent written and verbal communication skills.
• Ability to work independently and as part of a team.
• Ability to present complex technical information in a clear and concise manner.
• Strong attention to detail.
• High level of integrity and professionalism.
• Willingness to learn and develop cybersecurity expertise.
• Ability to manage multiple priorities effectively.

Competencies Required for this Role:

• Strong analytical and problem-solving abilities.
• Excellent written and verbal communication skills.
• Ability to work independently and as part of a team.
• Strong attention to detail.
• High level of integrity and professionalism.
• Willingness to learn and develop cybersecurity expertise.
• Ability to manage multiple priorities effectively.
• Proficiency in security information systems and database management.
• Strong organizational and project management skills.

Experience needed

• Minimum of four (4) years of experience in a full-time information security role.
• At least two (2) years of experience in a Security Operations Centre (SOC) role.
• Experience working in a higher education environment will be an added advantage.

• Work in 24/7 rotational shifts to monitor security alerts generated by various security tools deployed within the university.
• Respond promptly to security alerts within defined procedural SLAs and policies.
• Conduct continuous monitoring to detect and mitigate potential threats.
• Investigate security incidents to determine their source, scope, and impact.
• Develop and implement incident response plans to mitigate security threats.
• Conduct vulnerability and risk assessment exercises to preemptively identify risks.
• Collaborate with internal teams to manage and remediate security breaches and incidents.
• Maintain and optimize security tools, including: SIEM (Security Information and Event Management), IDS/IPS (Intrusion Detection and Prevention Systems), EDR (Endpoint Detection and Response Solutions)
• Identify and correlate security events to ensure prompt response to threats.
• Continuously improve security measures based on analysis of system vulnerabilities.
• Maintain cybersecurity asset inventories and documentation.
• Support onboarding of log sources into monitoring platforms.
• Support administration of cybersecurity platforms as assigned.
• Review system logs from different sources to analyze behaviour and detect policy violations.
• Take corrective action based on log analysis insights to mitigate security threats.
• Monitor and research emerging attack patterns and cyber threats.
• Stay up to date with industry best practices and trends in cybersecurity.
• Implement proactive threat intelligence measures to mitigate evolving security risks.
• Assist in implementing incident response procedures.
• Ensure that the university’s Information Security efforts comply with relevant industry standards and regulations.
• Manage General IT Controls (ITC) to maintain robust security governance.

• Strong analytical and problem-solving skills.
• Excellent written and verbal communication skills.
• Ability to work independently and as part of a team.
• Ability to present complex technical information in a clear and concise manner.
• Strong attention to detail.
• High level of integrity and professionalism.
• Willingness to learn and develop cybersecurity expertise.
• Ability to manage multiple priorities effectively.
• Proficiency in security information systems and database management.
• Strong organizational and project management skills.

• Bachelor’s Degree in Information Security or a related field from a recognized university.
• Master’s Degree in Information Security or a related field will be an added advantage.
• Relevant professional certification such as CISSP, CEH, or CHFI.
• Additional industry certifications (e.g., CISM, LPT, OSCP) are highly desirable.
• Membership in a recognized professional body.
• Advanced knowledge and experience in deploying and managing IT Security monitoring tools, including: SIEM solutions, SOAR (Security Orchestration, Automation, and Response), Enterprise antivirus systems, Endpoint Detection and Response (EDR) solutions
• Strong knowledge of: Networks, firewalls, and intrusion detection systems, Web proxies, Windows, and Linux systems (both on-premise and cloud-based)
• Familiarity with Information Security and Privacy best practices and laws, especially within a higher education context.
• Experience with risk management frameworks, including: NIST SP-800, ISO 27001, NIST Cybersecurity Framework (CSF)