• Monitor SIEM, IDS/IPS, EDR, and network logs to detect and investigate security events in real-time. • Lead vulnerability management: conduct regular scans, validate findings, and track remediation. • Coordinate and support annual cybersecurity assessments, penetration tests, and threat-hunting exercises. • Analyze security alerts and reports for compliance violations; research emerging threats and recommend mitigations. • Monitor security tools and platforms (e.g., FortSIEM, Rapid7, Sophos, Varonis, ForeScout) to ensure effective coverage. • Collaborate with IT operations to implement secure configurations, patch deployments, and change controls. • Assist in incident response: contain, eradicate, recover, and document lessons learned in runbooks. • Prepare clear technical reports and dashboards for stakeholders, highlighting trends and risk posture. • Provide security expertise and training to technical and non-technical staff; contribute to user awareness programs.

• Expert in implementing and maintaining security controls across networks, systems, and cloud environments. • Strong analytical skills for identifying vulnerabilities, assessing risks, and designing effective mitigations. • Hands-on experience with security tools and technologies, including firewalls, IDS/IPS, endpoint protection, and SIEM platforms. • Skilled in security architecture design and compliance with frameworks such as NIST, ISO 27001, and CIS benchmarks. • Problem-solver with attention to detail, able to detect and respond to security incidents efficiently • Clear communicator and collaborator, bridging gaps between security, IT, and business units. • Continuously evolving with threat intelligence and modern attack vectors to stay ahead of adversaries. • Strong knowledge of network and security infrastructure: firewalls, VPNs, WAFs, Windows, and Linux. • Skilled in scripting (Python, Bash, PowerShell) for automation, threat detection, and response. • Experienced with cloud security (Azure, AWS), including IAM, policy enforcement, and key management. • Solid understanding of regulatory frameworks: ISO 27001, NIST, CIS, COBIT, and BOU guidelines. • Hands-on with incident response, threat hunting, and log correlation in SOC environments. • Bachelor’s degree in computer science, Information Security, or a related field (or equivalent industry training). • 3–5+ years of hands-on cybersecurity experience, especially in financial or regulated environments. • Certifications in Ethical Hacking (CEH) or Offensive Security Professional (OSCP), CompTIA Security+ or equivalent foundational security credentials are added advantages

Kindly send your cover letter and up to date CV to hr@eximbank-ug.com with the subject: JOB APPLICATION: CYBER SECURITY ANALYST by close of business, Tuesday 1st July 2025.