Cape Town Hybrid SOC Analyst — Incident Response

EG5 Special Risks Consultancy; Cape Town; Hybrid; ZAR 350,000 - 650,000; Full time

Benefits offered by this job

Holiday – 23 days per year increasing

Life insurance – 4x annual salary

Private pension – up to 7%

Headspace mindfulness app

Hybrid working and flexible hours

Medical and dental benefits

Job summary

S-RM in Cape Town is seeking a SOC Analyst to join our Cyber Security division. You will deliver security operations across managed detection and response services, using SIEM, SOAR, and EDR tools. The role is hybrid with two days in the office and supporting a 24/7 shift rotation.

The ideal candidate has 2–3 years in a SOC, experience with Windows and Linux, AD, and M365 security monitoring, and a proactive mindset. This is a dynamic team focused on learning and growth.

Qualifications

• 2–3 years of experience working within a Security Operations Centre (SOC)
• Proficient in XDR and SIEM platforms (e.g., SentinelOne Singularity, Microsoft Sentinel)
• Experience with EDR solutions (SentinelOne, Defender for Endpoint, CrowdStrike)
• Knowledge of alert triage, event correlation, threat investigation, and incident escalation
• Working knowledge of Windows and Linux, Active Directory, and Microsoft 365 security monitoring
• Experience maintaining incident records, investigation notes, and operational documentation

Responsibilities

• Monitor security events from EDR, SIEM, and other tools to detect threats
• Conduct investigations and respond to incidents with containment, mitigation, and remediation
• Threat hunting to identify IoCs and advanced threats
• Tune detection rules, automate workflows, and improve incident detection
• Perform in-depth log analysis from firewalls and endpoints
• Collaborate with threat intelligence to enhance detection
• Document incidents, responses, and resolutions
• Participate in a 24/7 shift rotation including evenings, nights, and weekends

Skills

SOC operations

Incident response

Threat hunting

Threat detection

Log analysis

Threat intelligence

Documentation

Communication

Education

Bachelor’s degree in cyber security, Information Security, Computer Science, or related discipline

CompTIA CySA+

SC-100/SC-200

GIAC Certified Incident Handler (GCIH)

Certified SOC Analyst (CSA)

Blue Team / SOC Level 1 or 2

Tools

SIEM

SOAR

EDR

XDR

Job description

S-RM in Cape Town is seeking a SOC Analyst to join our Cyber Security division. You will deliver security operations across managed detection and response services, using SIEM, SOAR, and EDR tools. The role is hybrid with two days in the office and supporting a 24/7 shift rotation.

The ideal candidate has 2–3 years in a SOC, experience with Windows and Linux, AD, and M365 security monitoring, and a proactive mindset. This is a dynamic team focused on learning and growth.