Cyber Security Incident Management Specialist

Telecel Ghana
Location: Accra, Ghana
Employment Type: Full-Time
Application Deadline: 14 July 2026

About Telecel Ghana

Telecel Ghana is a leading telecommunications provider committed to delivering secure, reliable, and innovative digital services across Ghana. We continuously strengthen our cybersecurity posture to protect critical infrastructure, customer data, and digital services in an increasingly complex threat landscape.

We are seeking a highly skilled and detail-oriented Cyber Security Incident Management Specialist to lead the detection, investigation, response, and resolution of cybersecurity incidents across our enterprise environment.

Position Summary

The Cyber Security Incident Management Specialist will coordinate and execute incident detection and response activities, ensuring rapid containment and recovery from security threats. The successful candidate will perform advanced forensic investigations, analyse security events, and work closely with internal and external stakeholders to strengthen Telecel Ghana’s cyber resilience.

Key Responsibilities

Incident Detection and Response

• Monitor, detect, investigate, and respond to cybersecurity incidents across enterprise systems.
• Coordinate end-to-end incident response activities, including containment, eradication, and recovery.
• Analyse security alerts and correlate events across multiple platforms to identify active threats.
• Lead incident escalation processes and ensure timely communication to relevant stakeholders.

Digital Forensics and Investigation

• Conduct in-depth forensic investigations on compromised systems, including memory and disk analysis.
• Identify root causes, attack vectors, and indicators of compromise (IOCs) during security incidents.
• Perform malware analysis and reverse engineering to understand malicious behaviour and impact.
• Document findings and produce detailed forensic and incident reports.

Threat Detection and Analysis

• Utilise SIEM, log analysis, and threat detection platforms to identify anomalies and suspicious activities.
• Analyse network traffic using packet capture and inspection tools to detect potential breaches.
• Integrate threat intelligence feeds to enhance detection capabilities and contextual awareness.
• Apply CVE/CVSS scoring methodologies to prioritise vulnerabilities and remediation efforts.

Security Automation and Scripting

• Develop and implement automation scripts using Python, PowerShell, or Bash to improve incident response efficiency.
• Automate log parsing, alert correlation, and repetitive security tasks.
• Enhance detection rules and response workflows through continuous improvement initiatives.

Collaboration and Continuous Improvement

• Work closely with SOC, infrastructure, cloud, and application teams to strengthen security posture.
• Support vulnerability assessments and ensure timely remediation of identified risks.
• Contribute to the development and refinement of incident response playbooks and procedures.
• Share knowledge and insights to improve organisational cyber awareness and readiness.

Qualifications and Experience

Essential Requirements

• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related discipline.
• Minimum of 5+ years of progressive experience in cybersecurity, with strong focus on hands-on incident response and technical security operations.
• Proven experience in enterprise security environments with complex infrastructure and threat landscapes.

Certifications (Preferred or Equivalent)

• GIAC Certified Incident Handler (GCIH)
• GIAC Certified Forensic Analyst (GCFA)
• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• Certified Ethical Hacker (CEH)
• Offensive Security Certified Professional (OSCP)
• Certified Cloud Security Professional (CCSP)
• Computer Hacking Forensic Investigator (CHFI)

Technical Skills and Competencies

• Strong proficiency in SIEM platforms, log analysis, and security event correlation tools.
• Advanced knowledge of digital forensics, including memory and disk analysis techniques.
• Experience with intrusion detection and prevention systems (IDS/IPS).
• Strong understanding of network traffic analysis and packet inspection tools.
• Ability to integrate and analyse threat intelligence for incident response enhancement.
• Strong knowledge of vulnerability assessment methodologies and CVE/CVSS frameworks.
• Proficiency in scripting languages such as Python, PowerShell, and Bash for security automation.
• Strong analytical and problem-solving skills with attention to detail.
• Ability to perform effectively under pressure in high-severity incident situations.
• Excellent documentation, reporting, and communication skills.

How to Apply

Interested candidates should apply online by clicking on the Application button.