About the Role
Our client, a significant regional infrastructure provider servicing the Queenstown, Eastern Cape area, is seeking a dedicated Information Security Operations Center (SOC) Analyst to join their expanding IT security team. This role is vital for monitoring, detecting, analyzing, and responding to cybersecurity threats and incidents in real-time. The ideal candidate will be vigilant, possess strong analytical skills, and have a good understanding of common cyber threats and defense mechanisms. This position offers remote work flexibility, allowing for effective contribution to securing our client's critical operations in Queenstown from an off-site location.
Key Responsibilities
- Monitor security alerts and events from various sources, including SIEM, IDS/IPS, firewalls, and endpoint protection systems.
- Analyze security incidents to determine their scope, impact, and root cause.
- Respond to security alerts and incidents in a timely and effective manner, following established procedures.
- Perform initial triage and escalation of security events to appropriate teams.
- Conduct investigations into potential security breaches and policy violations.
- Assist in the development and refinement of SOC playbooks and incident response procedures.
- Stay updated on the latest cybersecurity threats, vulnerabilities, and trends.
- Contribute to threat intelligence gathering and analysis.
- Maintain accurate and detailed logs of all security activities and investigations.
- Participate in regular SOC team meetings and knowledge sharing sessions.
Requirements
- Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent practical experience.
- 1-3 years of experience in a Security Operations Center (SOC) role or similar cybersecurity position.
- Familiarity with SIEM tools (e.g., Splunk, ELK Stack), IDS/IPS, firewalls, and antivirus/anti-malware solutions.
- Understanding of networking concepts (TCP/IP, DNS, HTTP/S) and operating systems (Windows, Linux).
- Knowledge of common cybersecurity threats, attack vectors, and mitigation techniques.
- Strong analytical and problem-solving skills, with keen attention to detail.
- Effective written and verbal communication skills.
- Ability to work in a shift-based environment if required, and perform effectively in a remote setting.
- Relevant certifications such as CompTIA Security+ or CySA+ are advantageous.
- Proactive attitude and willingness to learn and adapt to new technologies.
Benefits
- Our client offers a competitive salary, performance-based bonuses, and a supportive benefits package including medical aid and retirement savings contributions.
- This role provides the significant advantage of remote work flexibility, enhancing work-life balance.
- Opportunities for continuous learning and professional development, including specialized cybersecurity training, are provided.
- Join a team committed to maintaining a secure environment for vital infrastructure in the Queenstown, Eastern Cape region.
- Your vigilance will directly contribute to protecting our client's assets and operations.