Background information about the job or company (e.g., role context, company overview)

Britam is a leading diversified financial services group, listed on the Nairobi Securities Exchange. The group has interests across the Eastern and Southern Africa region, with operations in Kenya, Uganda, Tanzania, Rwanda, South Sudan, Mozambique and Malawi. The group offers a wide range of financial products and services in Insurance, Asset management, Ban...

Responsibilities or duties

The role is responsible for monitoring, detecting, and responding to security incidents to ensure the integrity and availability of our systems and data.

Qualifications or requirements (e.g., education, skills)

Bachelor's degree in Computer Science, Information Security, or related field.

Relevant certifications such as CompTIA Security+, Certified Ethical Hacker (CEH), or equivalent is a plus.

Strong analytical and problem-solving skills with attention to detail.

Excellent communication and collaboration skills with the ability to work effectively in a team environment.

Demonstrate ability to learn quickly and adapt to new technologies and concepts.

Understanding of cybersecurity principles, threat landscape, and common attack vectors.

Familiarity with security tools such as SIEM, IDS/IPS, antivirus, and endpoint detection and response (EDR) solutions.

Experience needed

1-2 years’ experience in IT related role, prior experience or internship in a cybersecurity-related role is preferred but not required.

Any other provided details (e.g., benefits, work environment, team info, or additional notes)

Job Type: Full Time

Job Field: Data, Business Analysis and AI, ICT / Computer

• Monitor security alerts and events using SIEM (Security Information and Event Management) tools to identify potential security incidents.
• Conduct initial triage and analysis of security alerts to determine their validity and severity.
• Investigate security incidents, including analyzing logs, network traffic, and endpoint data to identify indicators of compromise (IOCs) and determine the scope and impact of the incident.
• Collaborate with senior SOC analysts and other cybersecurity teams to coordinate incident response activities and implement appropriate mitigation measures.
• Document incident details, analysis findings, and response actions taken in incident reports and case management systems.
• Assist in the development and implementation of security monitoring use cases, detection rules, and playbooks to enhance threat detection capabilities.
• Support the implementation, configuration, optimization, and ongoing management of cybersecurity tools and platforms, including SIEM, EDR, email security, vulnerability management, and threat intelligence solutions.
• Perform routine health checks, upgrades, tuning, and maintenance of security tools to ensure optimal performance and effectiveness.
• Assist in onboarding new log sources, integrations, and security technologies into the SOC environment.
• Stay informed about the latest cybersecurity threats, vulnerabilities, and attack techniques through continuous learning and training.
• Participate in tabletop exercises, incident response drills, and simulations to test and improve incident response procedures and preparedness.
• Provide support for security investigations, compliance audits, and regulatory inquiries as needed.
• Support user cybersecurity awareness initiatives by assisting in the delivery of security awareness training, phishing simulation campaigns, and user education programs to promote a strong security culture across the organization.
• Contribute to the overall improvement of SOC processes, procedures, and tools through feedback and suggestions.

• Strong analytical and problem-solving skills
• Attention to detail
• Excellent communication skills
• Collaboration skills
• Ability to learn quickly
• Adaptability to new technologies
• Understanding of cybersecurity principles
• Knowledge of threat landscape and common attack vectors
• Familiarity with SIEM, IDS/IPS, antivirus, and EDR solutions

• Bachelor's degree in Computer Science, Information Security, or related field.
• Relevant certifications such as CompTIA Security+, Certified Ethical Hacker (CEH), or equivalent is a plus.