Technology Department,Rwanda.Security & Monitoring Response Analyst

Other key purposes include:

• Perform real-time monitoring and analysis of security alerts and events.
• Conduct incident triage, investigation, and escalation.
• Support incident response activities to minimize business impact.
• Contribute to improving detection rules, use cases, and SOC processes.
• Ensure protection of confidentiality, integrity, and availability (CIA) of Bank information assets.

Support compliance with Rwanda data protection laws, NCSA, BNR, and other regulatory frameworks

KEY RESPONSIBILITIES:

• Monitor and analyze security alerts from SIEM, EDR, NDR, SOAR, and other tools to identify suspicious activities and threats.
• Perform initial triage and classification of alerts based on severity, impact, and potential risk to the Bank.
• Investigate security incidents through log analysis, network traffic inspection, and endpoint activity review.
• Execute incident response actions (containment, eradication, and recovery) in line with SOC procedures and SOC Lead guidance.
• Escalate complex or high-risk incidents promptly to the SOC Lead and relevant stakeholders.
• Support threat intelligence usage and contribute to threat hunting by identifying unusual patterns and indicators of compromise.
• Assist in tuning SIEM rules, alert thresholds, and correlation logic to improve detection accuracy and reduce false positives.
• Ensure SOC tools are functioning effectively, including supporting log source integration and reporting technical issues.
• Adhere to SOC processes, playbooks, and regulatory requirements (ISO 27001, NCSA, BNR), while identifying improvement opportunities.
• Document all incidents, investigations, and response actions, and provide timely updates and reporting on incident status.

DAILY RESPONSIBILITIES:

• Monitor SOC dashboards and respond to security alerts in real time.
• Perform triage and analysis of alerts to determine validity and severity.
• Investigate suspicious activities using logs, SIEM queries, and forensic tools.
• Escalate incidents as per defined escalation procedures.
• Track and update incident tickets to ensure timely resolution and proper documentation.
• Collaborate with SOC Lead and team members during incident handling.
• Review threat intelligence feeds and apply relevant insights.
• Ensure compliance with defined SLAs (e.g., response time, resolution time).

MINIMUM POSITION QUALIFICATION REQUIREMENTS

Academic & Professional

Education

Experience