First Ally Capital Limited is a significant indigenous financial services company in Nigeria providing investment banking, financial advising and investment management services to individuals and organisations. Founded in 2014 and regulated by the Securities and Exchange Commission (SEC) as an Issuing House and Underwriter, the company is known for its solid capital basis, experienced leadership and commitment to delivering innovative financial solutions.
Qualified individuals are invited to apply for the post below.
Quick Summary of Cybersecurity Analyst at First Ally Capital Limited
| Company | First Ally Capital Limited |
| Category | Job |
| Type | Full time |
| Job title | Cybersecurity Analyst |
| Location | Lagos, Nigeria |
| Experience Required | 3 to 5 years |
| Application Deadline | Not Specified (Open until filled) |
About First Ally Capital Limited
First Ally Capital is a totally indigenous Financial Services firm committed to providing best-in-class advising and investment services to individuals and corporate organisations.
The company was registered on May 20, 2014 with an authorized share capital of N2.5 billion (and an issued and fully paid-up capital of N1.65 billion) and is licensed by the Securities and Exchange Commission (SEC) as an Issuing House and Underwriter.
First Ally is at a critical juncture in Nigeria’s financial development and leans on its strong capital basis, the deep financial services experience of its promoters and the impeccable track record of its directors and shareholders to provide excellence in the Group and its subsidiaries.
The Role
We’re looking for a detail-oriented and technically competent Cybersecurity Analyst to join our IT team. In this vital role you will be the first line of defense for First Ally Capital’s digital assets, infrastructure and sensitive customer data.
You will be responsible for monitoring, detecting and responding to threats across our Microsoft 365 (M365) and Azure cloud systems and our retail-facing banking application.
This is a hands-on role for the analytical mind that enjoys hunting threats, hardening cloud infrastructures, and building security into the development lifecycle.
Key Responsibilities
Security Monitoring and Threat Detection
- Monitor security alerts from Microsoft Sentinel, Defender for Endpoint, and Defender for Cloud Apps.
- Investigate and triage security incidents, determine root causes, and escalate when necessary.
- Analyze logs from Azure Monitor, Microsoft 365 Security Center, and retail applications to detect suspicious activities.
- Fine tune SIEM detection rules, alert thresholds, and correlation queries to reduce false positives.
Identity and Access Management
- Conduct user access reviews across Microsoft 365, Azure subscriptions, and business applications.
- Administer Microsoft Entra ID security policies, including Conditional Access, Multi Factor Authentication (MFA), and Privileged Identity Management (PIM).
- Investigate suspicious sign in attempts, identity attacks, and compromised credentials.
- Enforce least privilege access and Role Based Access Control (RBAC).
Cloud Security
- Secure Microsoft Azure and Microsoft 365 environments using Microsoft Defender for Cloud and Azure Policy.
- Review Azure networking configurations, including Network Security Groups, Azure Firewall, and Private Endpoints.
- Configure Exchange Online Protection, Safe Links, Safe Attachments, and Data Loss Prevention (DLP) policies.
- Improve security posture using Microsoft Secure Score recommendations.
Application Security
- Collaborate with development teams to integrate security into the Software Development Life Cycle (SDLC).
- Coordinate vulnerability assessments and DAST or SAST scans.
- Manage Web Application Firewall (WAF) rules and API security policies.
- Monitor application logs for unauthorized access, injection attacks, authentication abuse, and API misuse.
- Track remediation of application vulnerabilities within agreed service levels.
Vulnerability Management
- Perform vulnerability scans across cloud workloads, servers, and endpoints.
- Work with system administrators and vendors to remediate critical vulnerabilities.
- Produce dashboards showing patch compliance across infrastructure and applications.
Incident Response and Digital Forensics
- Participate in incident investigation, containment, eradication, and recovery.
- Maintain and improve incident response playbooks for Microsoft 365 and Azure environments.
- Document incidents, timelines, findings, and lessons learned.
- Support forensic evidence collection when required.
Compliance and Governance
- Maintain cybersecurity policies, procedures, and documentation.
- Support compliance with industry standards and regulatory frameworks, including:
- Central Bank of Nigeria (CBN) Cybersecurity Framework
- Nigeria Data Protection Regulation (NDPR)
- ISO 27001
- PCI DSS where applicable
- Support internal and external security audits.
Endpoint and Email Security
- Investigate phishing attacks, Business Email Compromise (BEC), and malware threats.
- Manage Microsoft Defender for Endpoint policies.
- Administer Microsoft Intune device compliance and endpoint configuration profiles.
Qualifications
Applicants should possess:
- Bachelor’s Degree in Computer Science, Cybersecurity, Information Security, or a related discipline.
Experience Requirements
Candidates should have:
- Three to five years of hands-on experience in cybersecurity or IT security.
- Experience working with Microsoft 365 security technologies.
- Practical knowledge of Microsoft Azure security services, including Defender for Cloud, Microsoft Sentinel, Entra ID, and Azure Policy.
- Experience with vulnerability assessment tools and common security vulnerabilities.
- Working knowledge of Kusto Query Language (KQL) for Microsoft Sentinel is highly preferred.
- Understanding of web and mobile application security, including the OWASP Top 10 and API security.
Preferred Certifications
The following certifications will be an added advantage:
- Microsoft Certified: Security Operations Analyst Associate (SC 200)
- Microsoft Certified: Azure Security Engineer Associate (AZ 500)
- CompTIA Security+
- Certified Ethical Hacker (CEH) or equivalent certification
Required Technical Skills
Candidates should have experience with:
- Microsoft Sentinel (SIEM and SOAR)
- Microsoft Defender for Endpoint
- Microsoft Defender for Cloud
- Microsoft Defender for Office 365
- Microsoft Purview
- Microsoft Intune
- Microsoft Entra ID
- Azure Policy
- Azure Firewall
- Network Security Groups (NSGs)
- PowerShell scripting
- Kusto Query Language (KQL)
- Identity and Access Management
- Role Based Access Control (RBAC)
- Zero Trust security architecture
- TCP/IP, DNS, VPN, HTTP and HTTPS networking
- Web Application Firewall (WAF)
- DAST and SAST security testing tools
- Vulnerability management solutions such as Microsoft Defender Vulnerability Management, Nessus, or Qualys
How to Apply
Interested and qualified candidates should apply online by clicking the link below:
Note: Only shortlisted candidates will be contacted for further assessment.
YOU MAY ALSO BE INTERESTED IN:
Oil Spill Response Inspector at Western Development Company Limited (WDCL)
Graduate Engineer Trainee at African Fertilizer and Chemicals Nigeria Limited (AFC)
NDT Inspector at Western Development Company Limited (WDCL)
Adedeji Scholarship Program (TASP) 2027 University students
MTN Skills Academy Program for Africans 2026 | Free Digital Skills Training & How to Apply
2026 Digital Jewels CARES Scholarship for Nigerian Students | Fully Funded STEM Scholarship
Bosun Tijani Foundation Gen AI Fellowship Cohort 2 2026 | Fully Funded + ₦50,000 Monthly Stipend
Tinubu Engineering Mentorship Program 2026 by Federal Ministry of Works | Monthly Stipend & How to Apply
Join Our WhatsApp Group for Free Job Study Materials & Updates!
If you’re currently preparing for any job recruitment exams, interviews, or government job opportunities, this is for you! We’ve created a WhatsApp group where we share FREE study materials to help you stay ahead in your career journey.
Don’t wait till you hear about openings too late — be the first to know and prepare smartly!