Hybrid Senior Cyber Threat Analyst

at Old Mutual Limited

• Job title: Senior Cyber Threat Analyst
• Job type: Full Time
• Experience level: Senior
• Salary: Not specified
• Degree requirement: Bachelor's Degree
• Tech skills: AWS, Azure, Cloud, Cyber Security, Splunk
• Location requirements: Hybrid, Johannesburg, South Africa

About the role

• Senior Cyber Analyst at OM Bank leading threat detection, investigation, and incident response in a digital banking environment. Collaborating with internal and external teams to safeguard the bank's digital ecosystem.

Responsibilities

• Lead advanced second level line threat monitoring activities in collaboration with the MDR partner across SIEM, EDR, AWS, and broader security technologies.
• Perform deep-dive analysis and validation of security alerts, differentiating true positives from noise.
• Integrate emerging threat intelligence into detection logic, playbooks, and monitoring strategy.
• Lead first and second-level incident response efforts, including containment, eradication, recovery, and root-cause analysis.
• Oversee forensic evidence collection, timeline reconstruction, and documentation for major security incidents.
• Develop, maintain, and continuously refine incident response playbooks to improve speed and consistency.
• Serve as the primary liaison with the MDR partner for threat detection and incident-handling activities.
• Provide concise, high-quality updates and reports to the Cyber Defence Lead, senior stakeholders, and risk teams.
• Produce post-incident reports, metrics, and analysis to support audits, regulatory reviews, and ongoing improvements.
• Lead and participate in proactive threat-hunting exercises across cloud, network, IAM, and application layers.
• Recommend and implement improvements to security tooling, alerting, and processes based on incident trends and data.
• Support compliance with regulatory, audit, and cybersecurity standards through strong governance and documentation practices.

Requirements

• Bachelor’s degree in Cybersecurity, Information Technology, or a related field.
• 5+ years in cybersecurity with strong emphasis on threat detection, incident response, and security operations.
• Experience working with or managing MDR/SOC providers.
• Exposure to digital banking, fintech, or regulated financial services environments is highly desirable.
• Strong understanding of AWS and Azure cloud security principles, identity security, and modern digital banking architectures.
• Proficiency with SIEM (e.g., Sentinel, Splunk), EDR/XDR platforms, and threat intelligence tools.
• Hands-on understanding of MITRE ATT&CK, NIST CSF, ISO 27001, or equivalent frameworks.
• Familiarity with cloud-native security tooling such as AWS Security Hub, GuardDuty, IAM Access Analyzer, Azure Defender, and Sentinel.
• Ability to perform log analysis, packet inspection, and basic forensic investigation.

Benefits

• Professional certifications such as CEH, GCIA, GCIH, GCFA, GNFA, Azure/AWS Security Specialty, or equivalent are highly advantageous.