About Company
AngloGold Ashanti is a global gold mining company with a diversified portfolio of operations and projects. We are one of the world’s leading gold producers, committed to creating value for our shareholders, employees, and host communities. Our Geita Gold Mine (GGM) in Tanzania is a large-scale, open pit and underground operation and a cornerstone of our African portfolio. At GGM, we are dedicated to operational excellence, environmental stewardship, and the socio-economic development of the Geita region. We leverage advanced technology and a highly skilled workforce to ensure safe and sustainable mining practices, striving to be a beacon of responsible resource management and a vital contributor to Tanzania’s economy.
Job Description
We are seeking a highly skilled and proactive Cyber Threat Detection Specialist to join our robust IT Security team at the Geita Gold Mine. In an increasingly interconnected world, safeguarding our critical operational technology (OT) and information technology (IT) infrastructure from sophisticated cyber threats is paramount to our continued success and operational continuity. This role offers a unique opportunity to contribute to the security posture of a large-scale mining operation, protecting assets that are vital to our production and safety. The ideal candidate will be an expert in identifying, analyzing, and responding to cyber threats, employing a range of tools and methodologies to maintain a vigilant defense against potential adversaries. You will be instrumental in ensuring the confidentiality, integrity, and availability of our systems and data, directly impacting our ability to operate securely and efficiently. This position requires a keen eye for detail, exceptional analytical skills, and the ability to work under pressure to mitigate risks and protect our valuable assets.
Key Responsibilities
- Continuously monitor security alerts and events from various sources, including SIEM, EDR, IDS/IPS, and network logs, to detect potential cyber threats.
- Perform in-depth analysis of security incidents, anomalous activities, and indicators of compromise (IOCs) to determine their nature, scope, and potential impact.
- Develop and refine detection rules, signatures, and correlation logic within security tools to improve threat visibility and reduce false positives.
- Participate in incident response activities, including containment, eradication, recovery, and post-incident analysis, ensuring timely and effective resolution.
- Conduct regular vulnerability assessments and penetration testing activities to identify weaknesses in systems, applications, and network infrastructure.
- Stay abreast of the latest cyber threat intelligence, attack vectors, and security vulnerabilities, incorporating new knowledge into detection and defense strategies.
- Collaborate with IT and OT teams to implement security controls, patches, and configurations, enhancing the overall security posture of the mine.
- Generate comprehensive reports on security incidents, trends, and mitigation efforts for management and relevant stakeholders.
- Provide mentorship and guidance to junior security analysts, fostering a culture of continuous learning and improvement within the team.
Required Skills
- Minimum 4 years of experience in a cybersecurity role, specifically in threat detection, incident response, or security operations.
- Strong understanding of TCP/IP, network protocols, operating systems (Windows, Linux), and cloud security principles.
- Proficiency with Security Information and Event Management (SIEM) platforms (e.g., Splunk, IBM QRadar, Microsoft Sentinel).
- Experience with Endpoint Detection and Response (EDR) tools and antivirus solutions.
- Solid knowledge of common cyber-attack techniques, tactics, and procedures (TTPs), and MITRE ATT&CK framework.
- Familiarity with scripting languages (e.g., Python, PowerShell) for automation and data analysis.
- Excellent analytical, problem-solving, and communication skills.
Preferred Qualifications
- Bachelor’s degree in Computer Science, Information Security, or a related technical field.
- Relevant industry certifications such as CompTIA Security+, CEH, GIAC certifications (e.g., GCIH, GCIA), or CISSP.
- Experience in an industrial control systems (ICS) or operational technology (OT) security environment, preferably in mining or heavy industry.
- Knowledge of digital forensics and malware analysis techniques.
- Familiarity with security frameworks like NIST, ISO 27001, or COBIT.
Perks & Benefits
- Competitive salary and performance-based bonuses.
- Comprehensive health, dental, and vision insurance for employees and dependents.
- Generous paid time off, including annual leave, sick leave, and public holidays.
- Retirement savings plan with company contributions.
- Opportunities for professional development, training, and certification sponsorships.
- Relocation assistance and accommodation support (where applicable) for candidates moving to Geita.
- Access to modern on-site facilities and a supportive work environment.
- Career growth and advancement opportunities within a global mining organization.
- Contribution to a company committed to safety, environmental sustainability, and community development.
How to Apply
Interested and qualified candidates are encouraged to apply by clicking on the application link below. Please ensure your resume highlights your relevant experience in cyber threat detection and incident response. Only shortlisted candidates will be contacted for an interview. AngloGold Ashanti is an equal opportunity employer and values diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, or disability status. We look forward to receiving your application.