ICT Security SOC Analyst

About the role

Co-operative Bank of Kenya is looking for a proactive and analytical ICT Security SOC Analyst to strengthen its cybersecurity capabilities. The role involves monitoring the bank's technology environment, detecting suspicious activity, investigating security alerts and coordinating responses to cyber incidents so that the bank's systems, data and digital services remain protected.

Key responsibilities

• Monitor the bank's networks and systems 24 hours a day with SIEM tools to detect, analyse and investigate potential threats.
• Carry out proactive threat research, monitor open-source intelligence sources and recommend and support defensive measures against emerging threats.
• Triage security alerts, investigate suspicious activity, analyse security logs and help contain, eradicate and resolve cyber incidents with ICT teams.
• Analyse network and host-based logs (firewall, intrusion detection, system) to decide corrective actions, mitigation and escalation paths.
• Record investigations, document incident response, track resolution and give status updates and reports to management.
• Help maintain SOC procedures, monitoring use cases, incident response processes and security documentation.
• Work with ICT Security, ICT Risk and Control, Security Services and other technical teams on incidents and vulnerabilities.
• Stay up to date on threats, technologies and best practices through training and professional development.

Required profile

• Bachelor's degree in Information Technology, Computer Science or a related field.
• At least one year of experience as a Security Administrator, Network Administrator or in a similar technical role, or equivalent knowledge.
• Professional certification in CEH or CySA+ is mandatory; CISSP, CISA, CCNA or other recognised cybersecurity certifications are an added advantage.
• Experience in information security, security engineering or analytical roles in complex business environments.

Required skills

• Technical knowledge of SIEM and SOAR solutions, and of network, database and operating system security.
• Understanding of security methodologies, firewalls and intrusion detection systems.
• Knowledge of TCP/IP, network analysis, common internet protocols and network security applications.
• SQL knowledge is an added advantage.

To apply, send an application letter with a detailed CV by 11 November 2026, citing the job reference number SOC/IID/2026.