ICT Security SOC Analyst

About the role

Co-operative Bank is looking for a proactive and analytical ICT Security SOC Analyst to strengthen its cybersecurity capabilities. The role monitors the bank's technology environment, detects suspicious activity, investigates security alerts and coordinates responses to cyber incidents so that the bank's systems, data and digital services are protected. It is a full-time position based in Nairobi.

Key responsibilities

• Monitor the bank's networks and systems 24 hours a day with SIEM tools to detect, analyse and investigate potential threats.
• Conduct proactive threat research, monitor open-source intelligence sources and recommend and support defensive measures against emerging threats.
• Triage security alerts, investigate suspicious activity, analyse security logs and support containment, eradication and resolution of incidents with ICT teams.
• Analyse network and host-based logs (firewall, intrusion detection, system) to decide corrective actions, mitigation and escalation paths.
• Record investigations, document incident response, track resolution and report status and periodic updates to management.
• Help maintain SOC procedures, monitoring use cases, incident response processes and security documentation.
• Work with ICT Security, ICT Risk and Control, Security Services and other technical teams on incidents and vulnerabilities.
• Stay up to date on threats, technologies and best practices through training and professional development.

Required profile

• Bachelor's degree in Information Technology, Computer Science or a related field.
• At least one year of experience as a Security Administrator, Network Administrator or in a related technical role, or equivalent knowledge.
• Mandatory certification in CEH or CySA+; additional certifications such as CISSP, CISA, CCNA are an advantage.
• Experience in information security, security engineering or analytical roles in complex business environments.

Required skills

• Technical knowledge of SIEM and SOAR solutions, and of network, database and operating system security.
• Understanding of security methodologies, including firewalls and intrusion detection systems.
• Knowledge of TCP/IP, network analysis, common internet protocols and network security applications.
• SQL knowledge is an added advantage.

To apply, send a cover letter and detailed CV to the recruiter, quoting the job reference SOC/IID/2026, by 11 November 2026.