Cybersecurity Analyst - Incident Response and Forensics

Placements24; Vereeniging; On-site; ZAR 420,000 - 660,000; Full time

Benefits offered by this job

Competitive salary

Health insurance

Retirement benefits

Training and certifications

PTO and holidays

Job summary

Placements24 is seeking a vigilant Cybersecurity Analyst in Vereeniging, Gauteng, to join the on-site SOC. The role focuses on incident response and digital forensics, detecting and mitigating security events with SIEM, EDR, and forensic tools.

You will investigate incidents, contain threats, and help refine response playbooks. Ideal candidates hold a relevant degree and at least 3 years in security operations, with certifications a plus.

Qualifications

• Bachelor's degree or equivalent in a relevant field
• Minimum of 3 years of cybersecurity operations, incident response, or digital forensics
• Hands-on experience with SIEM, EDR, and network analysis tools
• Familiarity with forensic investigation techniques and tools
• Certifications such as CompTIA Security+, CEH, or GCIH are a plus

Responsibilities

• Monitor security alerts and events from SIEM, IDS/IPS, and EDR solutions
• Investigate incidents, perform forensic analysis, and determine root causes
• Develop containment, eradication, and recovery strategies for incidents
• Document incident details, actions taken, and lessons learned
• Participate in threat hunting to identify potential threats
• Contribute to improving incident response playbooks and procedures
• Stay current with emerging threats and attack vectors
• Collaborate with security and IT staff to address issues
• Assist in security awareness training sessions

Skills

Analytical thinking

Pressure handling

Communication skills

Team collaboration

Education

Bachelor's degree in Cybersecurity, Computer Science, or related field

Tools

Splunk

ELK Stack

EDR solutions

Wireshark

FTK

EnCase

Job description

About the Role

Our client, a prominent player in the logistics and supply chain industry, is seeking a vigilant Cybersecurity Analyst specializing in Incident Response and Forensics. This role is vital for detecting, investigating, and responding to security incidents, ensuring minimal disruption to operations. You will be part of a dedicated security operations center (SOC) team, working with advanced tools and techniques to protect the organization's digital infrastructure. The position is located in Vereeniging, Gauteng , and requires an on-site presence to facilitate immediate response to critical security events.

Key Responsibilities

• Monitor security alerts and events from various sources, including SIEM, IDS/IPS, and endpoint detection and response (EDR) solutions.
• Investigate security incidents, perform forensic analysis of compromised systems, and determine the root cause.
• Develop and execute containment, eradication, and recovery strategies for security incidents.
• Document incident details, actions taken, and lessons learned in a clear and concise manner.
• Participate in threat hunting activities to proactively identify potential security threats.
• Contribute to the improvement of incident response playbooks and security procedures.
• Stay current with emerging threats, vulnerabilities, and attack vectors.
• Collaborate with other security team members and IT staff to address security issues.
• Assist in conducting regular security awareness training sessions.

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, or a related field.
• Minimum of 3 years of experience in cybersecurity operations, incident response, or digital forensics.
• Hands-on experience with SIEM tools (e.g., Splunk, ELK Stack), EDR solutions, and network analysis tools (e.g., Wireshark).
• Familiarity with forensic investigation techniques and tools (e.g., FTK, EnCase).
• Understanding of common attack methodologies and threat actor tactics.
• Strong analytical and problem-solving skills, with the ability to work effectively under pressure.
• Good communication skills, both written and verbal.
• Relevant certifications such as CompTIA Security+, CEH, or GCIH are a plus.

Benefits

• Competitive salary and potential for annual bonuses.
• Comprehensive health insurance and retirement benefits.
• Opportunities for advanced training and certifications in cybersecurity.
• Exposure to diverse security challenges within a critical industry.
• A collaborative and professional work environment in Vereeniging, Gauteng .
• Career growth prospects within the security team.
• Paid time off and company holidays.