Security Operations Lead (DBN) at BETSoftware

Job Description

We Want You:

• Are you ready to lead the charge in protecting BETSoftware’s digital realm? We’re on the lookout for a Security Operations Lead to join our dynamic team in Durban. In this pivotal role, you will spearhead the defense against cyber threats, coordinate incident response efforts, and guide your team through investigations and threat reporting. Your expertise will drive system security compliance and remediation strategies. If you’re passionate about cybersecurity and ready to make a difference, apply now and be a part of our innovative team.

You Bring:

• Experience as a Senior Security Analyst leading a team.
• Experience with Security Operations Centre, network event analysis and/or threat analysis.
• Experience working as an Incident Responder.
• Knowledge of various security methodologies and technical security solutions.
• Experience analysing data from cybersecurity monitoring tools.
• Ability to analyse endpoint, network, and application logs.
• Experience tuning and/or configuring SIEM and vulnerability tools.
• Knowledge of common Internet protocols and applications

Desirable:

At least one recognised security certification:

• Certified Ethical Hacker (CEH)
• CompTIA Security+
• Certified Information System Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• Scripting experience in Linux or PowerShell preferred
• Bachelor’s degree in Computer Science, Information Technology or equivalent experience.

What You’ll Do:

• Provide leadership to Security Operations Centre analysts.
• Drive use cases within all the relevant products and teams to ensure constant refining of alerts and logging of events across the BET Group.
• Provide security monitoring and incident response of cyber security events in a highly available Security Operation Centre (SOC) that supports internal and external customers.
• Respond to cyber security incidents and provide analysis and trending of security log data from security devices and relevant security tools.
• Monitor and analyse Security Information and Event Management (SIEM) alerts to identify security issues for remediation and investigate events and incidents.
• Monitor all security logs and events.
• Provide proactive “threat hunting” to detect incidents.
• Tune rules and thresholds to improve fidelity of alerts.
• Prepare reports of analysis and results to provide briefings to management and exec.
• Provide Incident Response support when analysis confirms actionable incident.
• Investigate, document, and report on information security issues and emerging trends.
• Mentor junior staff and interns.

Team management:

• Ensures the team is appropriately resourced and members are equipped with the requisite skill required for both current and future projects.
• Support and/or develop a training and career development plan for each team member.
• Collaboratively works with team members to set performance goals and measures.
• Conducts regular performance discussions with the team to facilitate a culture of growth.
• Facilitates mentoring and coaching as required.
• Oversees all aspects of the team by facilitating and resolving issues through effective problem solving and communication skills.
• Maintain a current and future skill matrix for the team.
• Create a culture for teams that are aligned to the platforms and BET values.
• Manage Team Members from a disciplinary perspective, ensuring HR is adequately informed of any disciplinary matters.
• Assist with investigations and the management of disciplinary hearings as needed.
• Manage the team's time and attendance, ensuring that reports are updated and prompt feedback is provided to the Time and Attendance team.