Cybersecurity Career Opportunity

Job Title: Cybersecurity Professional

Department: Security Operations Center (SOC)

Reports To: SOC Manager / SOC Lead

Location: Lahore/Kharian, Punjab, Pakistan

ACE Money Transfer is a UK-based company headquartered in Manchester, United Kingdom. The company is an online remittance service provider for customers from the UK, Canada, Australia, and the European Union, including Switzerland. The company is a parent company in a group of companies with a diversified portfolio, including digital wallet services in the UK and real estate, advertising businesses, and software solutions in Pakistan.

The SOC Analyst Level 2 plays a crucial role in the proactive monitoring, detection, analysis, and response to security incidents within the ACE IT infrastructure. With approximately 3 years of experience, this individual possesses a solid understanding of security principles, threats, and technologies. They are responsible for escalating complex security events, conducting in-depth investigations, and contributing to the improvement of security processes and tools. The ideal candidate is a highly motivated and detail-oriented individual with strong analytical and problem-solving skills, capable of working independently and as part of a team.

• Security Monitoring and Analysis:
  • Continuously monitor security alerts and events from various security tools (SIEM, IDS/IPS, firewalls, endpoint security, etc.).
  • Analyze security logs and network traffic to identify potential security incidents and anomalies.
  • Perform initial triage and analysis of security events to determine their validity, scope, and severity.
  • Correlate security events from multiple sources to identify complex attack patterns.
• Incident Response:
  • Follow established incident response procedures to contain, eradicate, and recover from security incidents.
  • Conduct initial and in-depth technical investigations of security incidents.
  • Document all findings, actions taken, and communications related to security incidents.
  • Escalate complex or high-severity incidents to SOC Level 3 analysts or other relevant teams as necessary.
  • Assist in the development and refinement of incident response playbooks.
• Threat Intelligence:
  • Stay up-to-date on current security threats, vulnerabilities, and attack techniques.
  • Utilize threat intelligence platforms and feeds to enhance detection and response capabilities.
  • Contribute to the development of threat profiles and indicators of compromise (IOCs).
• Security Tooling and Technologies:
  • Utilize and maintain various security tools and technologies, including SIEM, IDS/IPS, EDR, vulnerability scanners, and ticketing systems.
  • Contribute to the configuration, tuning, and optimization of security monitoring tools.
  • Troubleshoot issues related to security tools and escalate as needed.
• Reporting and Documentation:
  • Prepare clear and concise reports on security events, incidents, and trends.
  • Maintain accurate and up-to-date documentation of security processes and procedures.
• Collaboration and Communication:
  • Effectively communicate security-related information to both technical and non-technical audiences.
  • Collaborate with other security teams, IT departments, and business units on security matters.
  • Participate in knowledge-sharing activities within the SOC team.
• Continuous Improvement:
  • Identify areas for improvement in security monitoring, detection, and response processes.
  • Contribute to the development and implementation of new security rules and alerts.
  • Participate in security training and professional development activities.

• Education: Bachelor's degree in Computer Science, Information Security, or a related field (or equivalent practical experience).
• Experience: Minimum of 3 years of experience working in a Security Operations Center (SOC) environment.
• Skills: Strong understanding of security principles, common attack vectors, and mitigation techniques.
• Tools and Technologies: Experience with security monitoring tools and technologies (e.g., SIEM platforms like Splunk, Wazu; IDS/IPS systems; EDR solutions).
• Scripting: Basic scripting skills (e.g., Python, PowerShell) are a plus.
• Time Management: Ability to prioritize tasks and manage time effectively.
• Certifications: Relevant security certifications such as CompTIA Security+, CySA+, CEH, GCIH, or equivalent.
• Cloud Security: Knowledge of cloud security concepts and platforms (e.g., AWS, Azure, GCP).
• Vulnerability Management: Experience with vulnerability management processes and tools.
• Security Frameworks: Familiarity with security frameworks and standards (e.g., NIST, ISO 27001).
• SOAR Platforms: Experience with security automation and orchestration (SOAR) platforms.

If you are a dedicated cybersecurity professional with a passion for protecting digital assets and a desire to work in a dynamic and collaborative environment, we encourage you to apply. Please submit your resume and a cover letter detailing your relevant experience.