Information Security Analyst (SIEM Specialist)

Placements24; Southampton; On-site; GBP 19,000 - 29,000; Full time

Benefits offered by this job

Health and wellness benefits

Training and professional development

Job summary

Placements24 is seeking an Information Security Analyst specializing in SIEM to deploy, tune, and operate SIEM solutions. The role focuses on log analysis, threat detection, and timely incident response to protect financial data.

You will work with Splunk, QRadar, or ELK Stack, develop detection rules, and collaborate with IT to ensure comprehensive log coverage and data normalization. Strong cross-team coordination is essential.

Qualifications

• Bachelor's degree in IT, CS, Cybersecurity or related field.
• Minimum 3 years in information security operations with SIEM focus.
• Hands-on experience with one or more leading SIEM platforms.
• Proficiency in log analysis and various log formats.
• Knowledge of common threats, incident response procedures.
• Scripting skills (Python/PowerShell) for automation is a plus.

Responsibilities

• Deploy, configure, and maintain SIEM platforms (e.g., Splunk, QRadar, ELK).
• Develop and optimize SIEM rules, correlations, and alerts.
• Monitor dashboards and investigate suspicious activities; perform triage.
• Analyze logs from servers, firewalls, and applications to identify threats.
• Conduct threat hunting using SIEM data and security tools.
• Create and maintain SIEM documentation, use cases, and runbooks.
• Collaborate with IT/security teams to ensure proper log collection.
• Participate in incident response with SIEM expertise.
• Stay updated on threats, vulnerabilities, and SIEM best practices.
• Contribute to continuous improvement of security monitoring.

Skills

SIEM management

Log analysis

Threat hunting

Python scripting

PowerShell

Incident response

Education

Bachelor's degree in Information Technology / Computer Science / Cybersecurity

Tools

Splunk

QRadar

ELK Stack

Job description

About the Role

Our client, a prominent player in the financial technology sector, is looking for a skilled Information Security Analyst with a specialization in Security Information and Event Management (SIEM) systems, to join their expanding team. This role is based in Randburg, Gauteng , and will focus on the deployment, configuration, tuning, and ongoing operation of SIEM solutions to enhance the organization's security monitoring and incident detection capabilities. You will be responsible for analyzing security logs, identifying malicious activities, and responding to security events in a timely and effective manner. This is an exciting opportunity to work with advanced SIEM technologies and contribute directly to the protection of critical financial data. The ideal candidate will have a deep understanding of security operations, log analysis, and threat hunting. You will play a vital role in maintaining a strong security posture against sophisticated cyber threats.

Key Responsibilities

• Deploy, configure, and maintain SIEM platforms (e.g., Splunk, QRadar, ELK Stack).


• Develop and optimize SIEM rules, correlation logic, and alerts to detect security incidents effectively.


• Monitor SIEM dashboards and alerts, investigate suspicious activities, and perform initial triage.


• Analyze security logs from various sources (servers, firewalls, applications) to identify potential threats.


• Conduct threat hunting activities using SIEM data and other security tools.


• Develop and maintain SIEM documentation, including use cases, procedures, and runbooks.


• Collaborate with IT and security teams to ensure adequate log collection and data normalization.


• Participate in incident response activities, providing SIEM expertise.


• Stay up-to-date with the latest security threats, vulnerabilities, and SIEM best practices.


• Contribute to the continuous improvement of the organization's security monitoring capabilities.

Requirements

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field.


• Minimum of 3 years of experience in information security operations, with a strong focus on SIEM management and analysis.


• Hands-on experience with one or more leading SIEM platforms.


• Proficiency in log analysis and understanding of various log formats.


• Knowledge of common security threats, attack vectors, and incident response procedures.


• Familiarity with scripting languages (e.g., Python, PowerShell) for automation is a plus.


• Strong analytical and problem-solving skills.


• Excellent communication and teamwork abilities.


• Relevant certifications (e.g., CompTIA Security+, GIAC certifications related to SIEM or SOC analysis) are desirable.


• Ability to work independently and manage multiple priorities.

Benefits

• Competitive salary and performance-based incentives.


• Opportunity to specialize in SIEM technologies in Randburg, Gauteng .


• Comprehensive health and wellness benefits.


• Professional development opportunities and training budgets.


• A collaborative and supportive team environment.


• Exposure to cutting-edge security technologies in the FinTech industry.


• Generous annual leave and company holidays.


• Opportunities for career growth within the security team.