BDO Wave - L1/L2 Junior SOC Analyst Cape Town

BDO; Cape Town; On-site; ZAR 300,000 - 480,000; Full time

Job summary

BDO Wave seeks a Junior SOC Analyst in Cape Town to join our 24/7 MDR capability. You will triage alerts, analyze incidents, and support both the local and UK teams in a fast-paced security operations environment.

Responsibilities include SIEM tuning, log onboarding, and developing SOC playbooks while maintaining strong communication with clients and teammates.

Qualifications

• Experience with SIEM and XDR solutions.
• Understanding of OS and networking concepts.
• Knowledge of the MITRE ATT&CK framework.
• Strong written and oral communication skills.
• 1–2 years of SOC Analyst experience.
• Experience with Microsoft Sentinel.
• Experience onboarding, tuning, reporting and configuring SIEM solutions.
• Cyber security degree or equivalent.
• SOC-related certifications preferred.

Responsibilities

• Respond to alerts raised by the SIEM.
• Perform detailed analysis and investigations of potential incidents.
• Raise incidents and support the SOC manager during true positives.
• Respond to client requests and concerns.
• On-board log sources and troubleshoot log issues.
• Fine-tune SIEM/EDR platforms to reduce noise and false positives.
• Conduct use case testing and update/create rules as needed.
• Support the UK SOC manager in client engagements and meetings.
• Develop new SOC playbooks and processes.

Skills

Low-level concepts OS & networking

MITRE ATT&CK framework

Strong communication skills

SOC Analyst experience 1–2 years

Education

Cyber security degree/diploma or equivalent

SOC-related certifications

Tools

Microsoft Sentinel

SIEM/EDR platforms

Job description

BDO Wave - L1/L2 Junior SOC Analyst Cape Town (Cape Town CBD)

2026/10/21

Reference Number

BDOWAVE-L3MSE-G50-CPT-20CT2026-AR

Description

This role involves supporting the delivery of our managed security services through BDO Digital's global 24/7 MDR capability, with assistance from a dedicated local UK team. The individual in this position will collaborate closely with the UK SOC manager and an extensive pool of analysts. Your key responsibility is to triage security alerts for our global client base in line with defined processes and procedures and within a competitive SLA. The role demands a proactive approach to identifying potential security threats, refining alert mechanisms, and ensuring robust protection against emerging cyber threats. Additionally, the individual will contribute to the development and implementation of best practices, fostering a secure and resilient operational environment.

Requirements

RESPONSIBILITIES

As a L1/L2 Analyst you will:

• Respond to alerts raised by the SIEM
• Perform detailed analysis and undertake an in-depth investigation into potential and confirmed security incidents
• Raise incidents where necessary and supporting the SOC manager throughout true positive incidents
• Respond to SOC/MDR client’s requests, concerns and suggestions
• Assist in on-board log sources and work on log issues.
• Assist in fine-tuning SIEM/EDR platforms to exclude noise and false positives
• Conduct use case testing and modify/create as and when required
• Support UK SOC manager in client engagements and/or service meetings
• Support and develop new SOC playbooks and processes

REQUIREMENTS

• Understanding of low-level concepts including operating systems and networking.
• Experience with one or more Security and Event Management and XDR Solutions
• Understanding of one or more system administration (Linux, Windows, Mac)
• Knowledge of MITRE ATT&CK framework.
• Strong written and oral communication skills

Preferred:

• 1 to 2 years experiences as a SOC Analyst/Senior Security Operations professional.
• Experience onboarding, tuning, reporting and configuring SIEM solutions
• Experience with Microsoft Sentinel, including use case and rule development, workbook/playbook creation, KQL, logic apps/SOAR.

Qualifications (Preferred)

• Engineer/SOC related Certifications
• Cyber security degree/diploma or equivalent experience
• Experience with various Microsoft technologies, including Microsoft Defender for Endpoint, Identity and Cloud.
• Cyber Security Certifications such as Security+, CySA +