Lead Security Operations Center (SOC) Analyst

Placements24; Queenstown; Hybrid; NZD 120,000 - 180,000; Full time

Benefits offered by this job

Fully remote work arrangement

Health, dental, and vision insurance

Professional development budget

Paid time off

Job summary

Placements24 is seeking an experienced Lead SOC Analyst to supervise daily SOC operations, mentor junior analysts, and refine threat detection and incident response procedures. You will monitor alerts from SIEM, IDS/IPS, and EDR, while collaborating with security teams to protect a nationwide network infrastructure and customer data.

The role emphasizes leadership, strong technical expertise in security monitoring, threat intelligence, and incident management, and offers a remote work setup with

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field.
• Minimum 5-7 years in a SOC environment with at least 2 years in a lead or supervisory role.
• Extensive experience with SIEM tools (Splunk, QRadar, LogRhythm) and other security monitoring technologies.
• Strong understanding of networking protocols, operating systems, and common attack vectors.
• Proficiency in incident response methodologies and forensic analysis techniques.
• Experience with threat intelligence platforms and analysis.
• Excellent leadership, team management, and decision-making skills.

Responsibilities

• Lead and manage the day-to-day operations of the Security Operations Center (SOC).
• Mentor, train, and guide junior SOC analysts, fostering their professional development.
• Oversee monitoring of security alerts and logs from SIEM, IDS/IPS, EDR, and other sources.
• Direct and manage incident response processes, ensuring containment, eradication and recovery.
• Develop, tune, and implement new detection rules and use cases within the SIEM platform.
• Analyze threat intelligence to identify emerging threats and vulnerabilities.
• Create and maintain SOC procedures, playbooks, and incident response plans.
• Collaborate with other security teams to share information and coordinate efforts.
• Perform advanced investigations into complex security incidents and provide detailed reports.
• Stay current with cybersecurity threats and mitigation techniques.
• Contribute to continuous improvement of SOC capabilities and efficiency.

Skills

Leadership

Security monitoring

Incident management

Threat intelligence

Communication

Mentoring

Education

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field

Tools

Splunk

QRadar

LogRhythm

EDR

IDS/IPS

Job description

About the Role

Our client, a leading telecommunications provider operating across South Africa, is seeking an experienced Lead Security Operations Center (SOC) Analyst to join their cybersecurity team. This role is primarily remote, offering the flexibility to work from anywhere while leading the charge in monitoring, detecting, and responding to security threats. You will be responsible for managing the daily operations of the SOC, mentoring junior analysts, and refining threat detection and incident response procedures. The ideal candidate possesses deep technical expertise in security monitoring tools, threat intelligence, and incident management, coupled with strong leadership and communication skills. You will play a critical role in safeguarding the client's extensive network infrastructure and customer data from a wide array of cyber adversaries. Join a vital team dedicated to maintaining the security and integrity of critical communication services nationwide, contributing from your remote location to operations based out of Queenstown, Eastern Cape .

Key Responsibilities

• Lead and manage the day-to-day operations of the Security Operations Center (SOC).
• Mentor, train, and guide junior SOC analysts, fostering their professional development.
• Oversee the monitoring of security alerts and logs from various sources (SIEM, IDS/IPS, EDR, etc.).
• Direct and manage the incident response process, ensuring timely and effective containment, eradication, and recovery.
• Develop, tune, and implement new detection rules and use cases within the SIEM platform.
• Analyze threat intelligence to proactively identify emerging threats and vulnerabilities relevant to the organization.
• Create and maintain documentation for SOC procedures, playbooks, and incident response plans.
• Collaborate with other security teams (e.g., incident response, threat intelligence) to share information and coordinate efforts.
• Perform advanced investigations into complex security incidents and provide detailed reports.
• Stay current with the latest cybersecurity threats, attack vectors, and mitigation techniques.
• Contribute to the continuous improvement of the SOC's capabilities and operational efficiency in Eastern Cape .

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field.
• Minimum of 5-7 years of experience in a Security Operations Center (SOC) environment, with at least 2 years in a lead or supervisory role.
• Extensive experience with SIEM tools (e.g., Splunk, QRadar, LogRhythm) and other security monitoring technologies.
• Strong understanding of networking protocols, operating systems, and common attack vectors.
• Proficiency in incident response methodologies and forensic analysis techniques.
• Experience with threat intelligence platforms and analysis.
• Excellent leadership, team management, and decision-making skills.
• Strong analytical, problem-solving, and communication skills.
• Ability to work effectively in a remote, fast-paced environment and manage high-pressure situations.
• Relevant security certifications such as GCIH, GCIA, CEH, or CISSP are highly desirable for this role supporting operations in Queenstown .

Benefits

• Competitive salary with potential for performance bonuses.
• Fully remote work arrangement with flexibility.
• Comprehensive health, dental, and vision insurance.
• Retirement savings plan with employer contribution.
• Generous paid time off and sick leave.
• Annual budget for professional development, certifications, and training.
• Opportunity to lead a critical security function for a major telecommunications provider.
• Access to advanced security tools and technologies.
• Supportive and collaborative remote team culture.
• Career advancement opportunities within the organization across Eastern Cape .