Societe Generale Cameroon recruits a Level 1 SOC Analyst Douala – CDI
Education / Qualifications
Societe Generale Cameroon (SG Cameroon) is recruiting a Security Operations Center (SOC) Level 1 to strengthen the security of its information systems. Douala.
Other information
This recruitment is aimed at IT and cybersecurity professionals wishing to evolve in a demanding banking environment, where data protection, infrastructure monitoring and the detection of cyber threats are priorities.
The successful candidate will be responsible for monitoring security alerts, conducting initial investigations and contributing to the management of IT incidents.
Main duties
The Level 1 SOC Analyst provides operational oversight of the bank’s information systems to quickly detect cybersecurity incidents.
He is at the forefront of alert analysis, threat qualification and transmission to specialist teams when the situation requires it.
He is also involved in monitoring the coverage of security solutions and monitoring vulnerabilities in IT infrastructures.
Responsibilities
- System monitoring and threat detection
Continuously monitor consoles and IT security tools.
Analyze alerts generated by SIEM, EDR, Firewall, IDS/IPS, antimalware and DLP solutions.
Identify suspicious events that may compromise the security of the information system.
Process alerts within the timelines set out in Service Level Agreements (SLAs).
Participate in the supervision of the bank’s IT equipment and infrastructure.
- Analysis and qualification of security incidents
Make the first investigations on the detected alerts.
Distinguish real security incidents from false positives.
Identify the nature of threats: intrusion attempts, malware, data leaks or abnormal activities.
Collect the first technical information necessary for analysis.
Assess the criticality level of incidents according to established procedures.
- Climbing and Incident Management
Transmit critical or complex incidents to the Level 2 Team Lead SOC.
Prepare clear and structured preliminary reports.
Provide senior analysts with the information necessary for further investigation.
Comply with internal incident management and escalation procedures.
- Documentation and reporting
Create and update incident tickets.
Document the alerts analyzed and the actions carried out.
Ensure the traceability of interventions in incident management tools (ITSM).
Participate in the updating of operational procedures.
Monitor the performance indicators of the Security Operations Center.
Contribute to the production of SOC activity reports.
- Monitoring of security solutions
Control the deployment of protection solutions on IT equipment.
Follow the security coverage of workstations, servers and ATMs (DAB).
Identify equipment that is not covered or has anomalies.
Produce periodic reports on coverage rates of security tools.
Make the necessary reminders to those responsible for IT assets.
- Vulnerability management and monitoring
Participate in planned vulnerability scan campaigns.
Use detection tools to identify security weaknesses.
Perform a first qualification of the discovered vulnerabilities.
Inform the teams concerned of any anomalies identified.
Contribute to the follow-up of corrective actions.
Candidate profile
Academic training
Applicants must hold a Baccalaureate level diploma+3 or Bac+4 in one of the following areas:
Information technology.
Cyber security or information systems security.
Administration of systems.
Networks and telecommunications.
Any other equivalent discipline.
Experience
1 to 2 years of professional experience in a relevant field.
A first experience in computer security, system administration or network administration is an advantage.
A significant internship in one of these areas is also appreciated.
Technical skills required
Network Security and Systems
Good knowledge of the fundamentals of IT security.
Understanding of TCP/IP, DNS, HTTP/HTTPS and SMTP protocols.
Knowledge of network architectures.
Understanding of Windows, Linux and Cloud environments.
Ability to read and interpret system and application logs.
Cybersecurity tools
Familiarity with the following technologies is sought:
SIEM: Splunk, ELK, IBM QRadar or equivalent solutions.
Detection and protection: EDR, antivirus, antimalware, IDS/IPS and DLP.
Vulnerability Analysis: Qualys, Tenable or OpenVAS.
Encryption: Knowledge of solutions such as BitLocker.
Incident management: ITSM, Jira or similar tools.
Data analysis and reporting
Good command of office tools.
Ability to use Excel to analyze data.
Basic knowledge of Power BI.
Ability to produce automated dashboards and reports.
Understanding of fundamental concepts related to computer vulnerabilities.
Desired personal qualities
The ideal candidate will need to demonstrate:
Technical curiosity and a desire for continuous learning.
Discretion and absolute respect for the confidentiality of bank data.
Perseverance in tracking anomalies and corrective actions.
Special working conditions
Work in staggered hours
The position may require rotational work to ensure continuous monitoring of IT infrastructure.
Schedules can cover 24 hours a day, 7 days a week SOC operation, or correspond to the surveillance ranges defined by the bank.
Astrentes
The employee may be required to participate in a periodic penalty payment system:
During the weekends.
During public holidays.
According to a weekly or monthly rotation.
Professional environment
The position involves sustained monitoring of a continuous flow of security alerts, requiring concentration, responsiveness and adherence to procedures.
[Click the Apply button below to apply, and Create my CV to build a CV tailored to this offer, professionally]