Recruitment Notice: SOC Analyst Level 1 Recruitment Notice: SOC Analyst Level 1

Security Operations Center Analyst Level 1

Taf4All forwards a recruitment notice for a Level 1 SOC Analyst position based in Douala, in Cameroon, on an open-ended contract. The incumbent is hierarchically attached to the Team Lead SOC (Level 2 Analyst).

Main duty

The SOC Level 1 Analyst provides ongoing monitoring of the bank's information systems. It analyzes real-time security alerts generated by detection tools and contributes to operational control of asset compliance. It performs a first sort (sorting), qualifies proven incidents and quickly escalates complex threats to the next level, in compliance with operational procedures.

Activities and tasks

Monitoring and triage: Continuously monitor security consoles (SIEM, EDR, Firewall, IDS/IPS, Antimalware, DLP) and scan security alerts on time (SLA).

Qualification and initial analysis: conduct an initial investigation to eliminate false positives and identify the nature of the incident (intrusion attempt, malware, data leak, etc.).

Climbing: transmitting alerts qualified as critical or complex to Team Lead SOC (Level 2) accompanied by a clear and structured preliminary report.

Documentation: accurately write the incident tickets and record all actions carried out in the Incident Management System (ITSM).

Monitoring and improvement: participating in the updating of operational documentation and monitoring of SOC performance indicators (KPIs).

Monitoring the coverage of security solutions: monitoring the deployment status of security solutions throughout the perimeter (workstations, servers, ATMs and others) and generating periodic reports on their coverage rate.

Support for vulnerability management: Participate in the execution of planned vulnerability scans, preliminary qualification of discovered vulnerabilities and notification of affected teams.

Candidate profile

Training: Bac +3/4 in Computer Science, Information Systems Security, System Administration, Networks and Telecommunications, or equivalent.

Experience: 1 to 2 years of experience; a significant internship or first experience in information security or system/network administration is a major asset.

Technical skills

Knowledge of core network security concepts (TCP/IP, DNS, HTTP/S, SMTP); understanding of network architectures and operating systems (Windows, Linux, Cloud); basics in reading and analyzing system logs and applications; familiarity with SIEM tools (Splunk, ELK, IBM QRadar or equivalent); ability to use anti-vulnerability scanning tools (Qualys, Tenware, OpenVAS);

Soft skills

Rigor, method, sense of analysis and critical thinking; responsiveness and excellent stress management in emergency situations; good writing and relational skills (team spirit, collaborative spirit); analytical spirit and technical curiosity; absolute discretion and sensitivity to bank confidentiality issues; ability to learn quickly and continuous training; perseverance and tenacity for follow-up of raises with asset owners.

Special constraints

Hours: shift work covering the hours of supervision 24h/7 or according to the SOC opening hours set by the bank.

Astreints: participation in the system of on-call weekends and holidays (weekly or monthly rotation).

Environment: Exposure to a continuous stream of alerts requiring sustained attention.

[Click the Apply button below to apply, and Create my CV to build a CV tailored to this offer, professionally]