Information Security Operations Center (SOC) Analyst

Placements24; O Mente; Remote; EUR 16,000 - 29,000; Full time

Benefits offered by this job

Remote work flexibility

Performance-based bonuses

Medical aid

Retirement savings contributions

Job summary

Placements24 is seeking a dedicated Information Security Operations Center (SOC) Analyst to monitor, detect, analyze and respond to cybersecurity threats in real time for a regional infrastructure provider in Queenstown.

You will work with SIEMs, IDS/IPS and firewalls, perform triage, analysis, and incident handling, and contribute to playbooks while staying current on threats. Remote work flexibility and ongoing training are provided.

Qualifications

• Bachelor's degree in Cybersecurity, IT, CS, or related field or equivalent practical experience.
• 1-3 years of SOC or similar cybersecurity experience.
• Familiarity with Splunk, ELK Stack, IDS/IPS, firewalls, and antivirus solutions.
• Understanding of networking concepts (TCP/IP, DNS, HTTP/S) and Windows/Linux.
• Knowledge of common cybersecurity threats, attack vectors and mitigations.
• Strong analytical and problem-solving skills with attention to detail.
• Effective written and verbal communication skills.
• Ability to work in a shift-based environment and remote setting.
• CompTIA Security+ or CySA+ are advantageous.
• Proactive attitude and willingness to learn new technologies.

Responsibilities

• Monitor security alerts and events from SIEM, IDS/IPS, firewalls, and endpoint protection.
• Analyze security incidents to determine scope, impact, and root cause.
• Respond to alerts and incidents promptly following procedures.
• Perform initial triage and escalation of security events.
• Investigate potential security breaches and policy violations.
• Assist in developing and refining SOC playbooks and incident response procedures.
• Stay updated on threats, vulnerabilities and trends.
• Contribute to threat intelligence gathering and analysis.
• Maintain logs of security activities and investigations.
• Participate in SOC meetings and knowledge sharing sessions.

Skills

SIEM tools

Cybersecurity

Analytical thinking

Education

Bachelor's degree in Cybersecurity/IT/CS

Tools

Splunk

ELK Stack

IDS/IPS

Firewalls

Antivirus/anti-malware

Job description

About the Role

Our client, a significant regional infrastructure provider servicing the Queenstown, Eastern Cape area, is seeking a dedicated Information Security Operations Center (SOC) Analyst to join their expanding IT security team. This role is vital for monitoring, detecting, analyzing, and responding to cybersecurity threats and incidents in real-time. The ideal candidate will be vigilant, possess strong analytical skills, and have a good understanding of common cyber threats and defense mechanisms. This position offers remote work flexibility, allowing for effective contribution to securing our client's critical operations in Queenstown from an off-site location.

Key Responsibilities

• Monitor security alerts and events from various sources, including SIEM, IDS/IPS, firewalls, and endpoint protection systems.
• Analyze security incidents to determine their scope, impact, and root cause.
• Respond to security alerts and incidents in a timely and effective manner, following established procedures.
• Perform initial triage and escalation of security events to appropriate teams.
• Conduct investigations into potential security breaches and policy violations.
• Assist in the development and refinement of SOC playbooks and incident response procedures.
• Stay updated on the latest cybersecurity threats, vulnerabilities, and trends.
• Contribute to threat intelligence gathering and analysis.
• Maintain accurate and detailed logs of all security activities and investigations.
• Participate in regular SOC team meetings and knowledge sharing sessions.

Requirements

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent practical experience.
• 1-3 years of experience in a Security Operations Center (SOC) role or similar cybersecurity position.
• Familiarity with SIEM tools (e.g., Splunk, ELK Stack), IDS/IPS, firewalls, and antivirus/anti-malware solutions.
• Understanding of networking concepts (TCP/IP, DNS, HTTP/S) and operating systems (Windows, Linux).
• Knowledge of common cybersecurity threats, attack vectors, and mitigation techniques.
• Strong analytical and problem-solving skills, with keen attention to detail.
• Effective written and verbal communication skills.
• Ability to work in a shift-based environment if required, and perform effectively in a remote setting.
• Relevant certifications such as CompTIA Security+ or CySA+ are advantageous.
• Proactive attitude and willingness to learn and adapt to new technologies.

Benefits

Our client offers a competitive salary, performance-based bonuses, and a supportive benefits package including medical aid and retirement savings contributions. This role provides the significant advantage of remote work flexibility, enhancing work-life balance. Opportunities for continuous learning and professional development, including specialized cybersecurity training, are provided. Join a team committed to maintaining a secure environment for vital infrastructure in the Queenstown, Eastern Cape region. Your vigilance will directly contribute to protecting our client's assets and operations.