Security Threat Analyst

About the role

Leads and oversees the overall operations, strategy, and performance of the Security Operations Center (SOC), ensuring the effective monitoring, detection, analysis, and response to cybersecurity threats and incidents. Responsible for managing and developing the SOC team through recruitment, training, coaching, and performance evaluation. Establishes and enhances security processes, assesses incident reports, drives incident response and crisis communication activities, and provides regular updates, risk assessments, and recommendations to the CTMD Head and Chief Information Security Officer (CISO).

Key responsibilities

• Primarily responsible for 24x7 security event monitoring, incident management, and initial incident response

• Provides overall direction to the security monitoring team to achieve the team's goals and deliverables

• Provides technical guidance if needed

• Ensure compliance with SLA, process adherence, and process improvements to achieve operational objectives

• Collaborate with the rest of CTMD teams (threat hunting, incident response, and vulnerability management) to ensure proper monitoring and response to cyber security incidents

• Collaborate with the rest of ISD teams for security infrastructure improvements, identifying threat vectors, and developing use cases for security monitoring

• Communication of SOC value and posturing relationship with Computer Security Incident Emergency Response Team (CSIERT) and industry partners

• Responsible for the development, review, and documentation of SOC policies, standards, and procedures

• Ensure that the skills development of team members is continuous and aligned to their role

• Ensure that performance metrics for SOC, services, and tools are up to date

About you

• Bachelor's degree in information technology, Computer Science, Cybersecurity, or a related field

• Minimum of 3-5 years of experience in Cybersecurity, Security Operations, Incident Response, or Threat Management

• Strong experience in 24x7 Security Monitoring, Incident Response, Threat Detection, and Security Operations

• Hands-on experience with SIEM platforms (e.g., Splunk, QRadar, Microsoft Sentinel) and security monitoring tools

• Good understanding of cybersecurity frameworks, incident management, vulnerability management, and threat hunting

• Experience in team leadership, vendor management, stakeholder management, and operational reporting

• Strong analytical, problem-solving, and communication skills

• Experience in the banking or financial services industry is preferred

• Preferred Certifications: CISSP, CISM, GIAC, CRISC, CEH, or equivalent cybersecurity certifications