Information Security Analyst (SIEM Specialist)

Placements24; United States; On-site; USD 33,000 - 51,000; Full time

Benefits offered by this job

Competitive salary

Health benefits

Professional development

Training budgets

Career growth

Cutting-edge FinTech tech

Generous leave

Collaborative team

Job summary

Placements24 is seeking a skilled Information Security Analyst specialized in SIEM to deploy, tune, and operate SIEM solutions, enhancing security monitoring and incident detection. You will analyze logs, identify malicious activity, and respond to events in a timely manner.

The ideal candidate has 3+ years in security operations, hands-on SIEM experience, scripting ability, and strong analytical and communication skills.

Qualifications

• Bachelor's degree in IT, CS, cybersecurity or related field.
• 3+ years of information security operations experience focusing on SIEM.
• Hands-on experience with leading SIEM platforms.
• Proficiency in log analysis and understanding of varied log formats.
• Knowledge of common security threats, attack vectors and incident response procedures.
• Scripting skills (Python, PowerShell) for automation.
• Strong analytical and problem-solving skills.
• Excellent communication and teamwork abilities.
• Certifications such as CompTIA Security+, GIAC SIEM/SOC are desirable.

Responsibilities

• Deploy, configure, and maintain SIEM platforms (e.g., Splunk, QRadar, ELK Stack).
• Develop and optimize SIEM rules, correlation logic, and alerts.
• Monitor SIEM dashboards and alerts, investigate suspicious activities, and perform initial triage.
• Analyze security logs from servers, firewalls, and applications to identify threats.
• Conduct threat hunting using SIEM data and other security tools.
• Develop and maintain SIEM documentation, including use cases and runbooks.
• Collaborate with IT and security teams to ensure log collection and data normalization.
• Participate in incident response activities, providing SIEM expertise.
• Stay up-to-date with threats, vulnerabilities and SIEM best practices.
• Contribute to continuous improvement of security monitoring capabilities.

Skills

SIEM management

Log analysis

Threat hunting

Automation scripting

Analytical skills

Teamwork

Communication

Education

Bachelor's degree in IT/CS/Cybersecurity

Certifications (e.g., CompTIA Security+, GIAC)

Tools

Splunk

QRadar

ELK Stack

Job description

About the Role

Our client, a prominent player in the financial technology sector, is looking for a skilled Information Security Analyst with a specialization in Security Information and Event Management (SIEM) systems, to join their expanding team. This role is based in Randburg, Gauteng , and will focus on the deployment, configuration, tuning, and ongoing operation of SIEM solutions to enhance the organization's security monitoring and incident detection capabilities. You will be responsible for analyzing security logs, identifying malicious activities, and responding to security events in a timely and effective manner. This is an exciting opportunity to work with advanced SIEM technologies and contribute directly to the protection of critical financial data. The ideal candidate will have a deep understanding of security operations, log analysis, and threat hunting. You will play a vital role in maintaining a strong security posture against sophisticated cyber threats.

Key Responsibilities

• Deploy, configure, and maintain SIEM platforms (e.g., Splunk, QRadar, ELK Stack).


• Develop and optimize SIEM rules, correlation logic, and alerts to detect security incidents effectively.


• Monitor SIEM dashboards and alerts, investigate suspicious activities, and perform initial triage.


• Analyze security logs from various sources (servers, firewalls, applications) to identify potential threats.


• Conduct threat hunting activities using SIEM data and other security tools.


• Develop and maintain SIEM documentation, including use cases, procedures, and runbooks.


• Collaborate with IT and security teams to ensure adequate log collection and data normalization.


• Participate in incident response activities, providing SIEM expertise.


• Stay up-to-date with the latest security threats, vulnerabilities, and SIEM best practices.


• Contribute to the continuous improvement of the organization's security monitoring capabilities.

Requirements

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field.


• Minimum of 3 years of experience in information security operations, with a strong focus on SIEM management and analysis.


• Hands-on experience with one or more leading SIEM platforms.


• Proficiency in log analysis and understanding of various log formats.


• Knowledge of common security threats, attack vectors, and incident response procedures.


• Familiarity with scripting languages (e.g., Python, PowerShell) for automation is a plus.


• Strong analytical and problem-solving skills.


• Excellent communication and teamwork abilities.


• Relevant certifications (e.g., CompTIA Security+, GIAC certifications related to SIEM or SOC analysis) are desirable.


• Ability to work independently and manage multiple priorities.

Benefits

• Competitive salary and performance-based incentives.


• Opportunity to specialize in SIEM technologies in Randburg, Gauteng .


• Comprehensive health and wellness benefits.


• Professional development opportunities and training budgets.


• A collaborative and supportive team environment.


• Exposure to cutting-edge security technologies in the FinTech industry.


• Generous annual leave and company holidays.


• Opportunities for career growth within the security team.