BDO Wave - Security Operations Manager (Senior Soc Analyst) Cape Town

BDO South Africa; Cape Town; On-site; ZAR 600,000 - 900,000; Full time

Job summary

BDO South Africa is seeking a seasoned L3 SOC Analyst to support our managed security services within the global MDR capability. You will triage alerts, perform deep threat hunting, fine-tune SIEM/EDR, and help enhance detection across client environments.

You will collaborate with the UK team, act as escalation point, mentor junior staff, and contribute to developing SOC playbooks and processes while engaging with clients on security matters.

Qualifications

• 3 to 5 years experiences as a L3 SOC Analyst/Senior Security Operations professional.
• Experience onboarding, tuning, reporting and configuring SIEM solutions.
• Understanding of low-level concepts including operating systems and networking.
• In-depth experience with one or more Security and Event Management and XDR Solutions.
• Understanding of one or more system administration (Linux, Windows, Mac).
• Actionable knowledge of MITRE ATT&CK framework.
• Excellent interpersonal skills with the ability to explain technical problems to non-technical business stakeholders at all levels
• Strong written and oral communication skills.

Responsibilities

• Respond to alerts raised by L1/L2 analysts, as the technical escalation point
• QA of investigations and notification and direct L1/L2 accordingly
• Perform detailed analysis and undertake an in-depth investigation into potential and confirmed security incidents
• Raise incidents where necessary and supporting the SOC manager throughout true positive incidents
• Conduct threat hunting across client environments
• Review and action alerts flagged as tuning candidates
• Help develop and mentor junior members of staff
• Lead the delivery of SOC/MDR projects
• Respond to SOC/MDR client's requests, concerns and suggestions
• On-board log sources and work on log issues.
• Fine-tune SIEM/EDR platforms to exclude noise and false positives
• Analyse, define and manage the delivery of new SIEM rules
• Conduct use case testing and modify/create as and when required
• Support UK operations manager in client engagements and/or service meetings
• Support and develop new SOC playbooks and processes
• Conduct presentations and updates to the client
• Respond to incident escalations and provide solid recommendations
• Conduct threat hunting exercises on SIEM and EDR platforms
• Develop and improve processes for monitoring and incident qualification

Skills

Threat hunting

SIEM tuning

Incident response

L3 SOC Analyst

Security monitoring

Communication

Education

Cyber security degree or equivalent experience

Engineer/SOC related Certifications

Tools

Microsoft Sentinel

EDR

XDR

KQL

Logic Apps/SOAR

Job description

This role involves supporting the delivery of our managed security services through BDO Digital's global 24/7 MDR capability, with assistance from a dedicated local UK team. The individual in this position will collaborate closely with the UK operations manager and an extensive pool of analysts. Key responsibilities include triaging security alerts, conducting advanced threat hunting activities, and continuously improving detection capabilities within the MDR service. The role demands a proactive approach to identifying potential security threats, refining alert mechanisms, and ensuring robust protection against emerging cyber threats. Additionally, the individual will contribute to the development and implementation of best practices, fostering a secure and resilient operational environment.

Responsibilities

• Respond to alerts raised by L1/L2 analysts, as the technical escalation point
• QA of investigations and notification and direct L1/L2 accordingly
• Perform detailed analysis and undertake an in-depth investigation into potential and confirmed security incidents
• Raise incidents where necessary and supporting the SOC manager throughout true positive incidents
• Conduct threat hunting across client environments
• Review and action alerts flagged as tuning candidates
• Help develop and mentor junior members of staff
• Lead the delivery of SOC/MDR projects
• Respond to SOC/MDR client's requests, concerns and suggestions
• On-board log sources and work on log issues.
• Fine-tune SIEM/EDR platforms to exclude noise and false positives
• Analyse, define and manage the delivery of new SIEM rules
• Conduct use case testing and modify/create as and when required
• Support UK operations manager in client engagements and/or service meetings
• Support and develop new SOC playbooks and processes
• Conduct presentations and updates to the client
• Respond to incident escalations and provide solid recommendations
• Conduct threat hunting exercises on SIEM and EDR platforms
• Develop and improve processes for monitoring and incident qualification

Requirements

• 3 to 5 years experiences as a L3 SOC Analyst/Senior Security Operations professional.
• Experience onboarding, tuning, reporting and configuring SIEM solutions
• Understanding of low-level concepts including operating systems and networking.
• In-depth experience with one or more Security and Event Management and XDR Solutions
• Understanding of one or more system administration (Linux, Windows, Mac)
• Actionable knowledge of MITRE ATT&CK framework.
• Excellent interpersonal skills with the ability to explain technical problems to non-technical business stakeholders at all levels
• Strong written and oral communication skills

Preferred

• In-depth experience with Microsoft Sentinel, including use case and rule development, workbook/playbook creation, KQL, logic apps/SOAR.

Qualifications (Essential)

• Engineer/SOC related Certifications
• Cyber security degree or equivalent experience

Qualifications (Preferred)

• Experience with various Microsoft technologies, including Microsoft Defender for Endpoint, Identity and Cloud.
• Cyber Security Certifications such as CISSP, Security+, CySA +
• MS SC200

#JS