Cybersecurity Operations Analyst - SOC Level 2

Placements24; Paarl; On-site; ZAR 420,000 - 660,000; Full time

Benefits offered by this job

Medical aid

Provident fund

Performance-based bonuses

Job summary

Placements24 is seeking a Cybersecurity Operations Analyst to join its SOC team in Paarl, Western Cape. This Level 2 role focuses on investigating security alerts, analyzing threats, and delivering containment, eradiation, and recovery actions using SIEM, IDS/IPS, and EDR technologies.

You will monitor security events, perform forensic analyses, and contribute to ongoing detection rule development, while collaborating with IT and security colleagues to improve overall resilience.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or related field or equivalent practical experience.
• Minimum of 3 years in a SOC or incident response role.
• Proven experience with SIEM platforms (e.g., Splunk, QRadar, LogRhythm).
• Strong understanding of networking protocols (TCP/IP) and attack vectors.
• Experience with endpoint security solutions (EDR) and antivirus technologies.
• Familiarity with scripting (Python, PowerShell) for automation is a plus.
• Excellent analytical and problem-solving skills with strong communication and teamwork.

Responsibilities

• Monitor and analyze security alerts from SIEM, IDS/IPS, EDR, and other tools.
• Investigate potential incidents, performing in-depth analysis of scope and impact.
• Respond with containment, eradication, and recovery actions.
• Conduct forensic analysis and collect evidence.
• Develop and refine detection rules and use cases for monitoring tools.
• Analyze malware samples and IOCs from threat intel.
• Document incident details and lessons learned.
• Collaborate with security and IT teams to resolve issues.
• Participate in on-call rotation for incident response.
• Stay updated on threats, vulnerabilities, and attack techniques.

Skills

Analytical thinking

Teamwork

Decision making

Incident response

Education

Bachelor's degree in CS/InfoSec or related

Tools

Splunk

QRadar

LogRhythm

EDR tools

Job description

About the Role

Our client, a rapidly expanding e-commerce platform, is seeking a skilled Cybersecurity Operations Analyst to join their Security Operations Center (SOC) team. This is a critical Level 2 role responsible for investigating and responding to security alerts, analyzing threats, and mitigating potential impacts on the organization's digital assets. You will work with advanced security tools, including SIEM, IDS/IPS, and EDR solutions, to monitor network and system activity. The position is based in our client's secure operations center in Paarl, Western Cape . We are looking for a proactive, detail-oriented individual with strong analytical skills and a passion for cybersecurity incident response. This role offers an excellent opportunity to gain hands-on experience with a wide range of security technologies and threats in a fast-paced environment.

Key Responsibilities

• Monitor and analyze security alerts from various security tools (SIEM, IDS/IPS, EDR, etc).
• Investigate potential security incidents, performing in-depth analysis to determine scope and impact.
• Respond to security incidents, providing timely containment, eradication, and recovery actions.
• Conduct forensic analysis of security events and collect evidence.
• Develop and refine detection rules and use cases for security monitoring tools.
• Analyze malware samples and threat intelligence to identify indicators of compromise (IOCs).
• Document incident details, actions taken, and lessons learned.
• Collaborate with other security team members and IT departments to resolve security issues.
• Participate in on-call rotation for incident response.
• Stay updated on the latest cybersecurity threats, vulnerabilities, and attack techniques.

Requirements

• Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent practical experience.
• Minimum of 3 years of experience in a Security Operations Center (SOC) or incident response role.
• Proven experience with SIEM platforms (e.g., Splunk, QRadar, LogRhythm).
• Strong understanding of networking protocols (TCP/IP), common attack vectors, and security principles.
• Experience with endpoint security solutions (EDR) and antivirus technologies.
• Familiarity with scripting languages (e.g., Python, PowerShell) for automation is a plus.
• Excellent analytical and problem-solving skills with the ability to make quick, informed decisions.
• Strong communication and teamwork abilities.
• Relevant security certifications such as CompTIA Security+, CySA+, GCIH, or CEH are advantageous.
• Must be eligible to work in South Africa .

Benefits

Our client offers a competitive salary, comprehensive medical aid, a provident fund, and performance-based bonuses. The Paarl, Western Cape office provides a collaborative and secure working environment. This role offers significant opportunities for professional growth, including advanced training in incident response, digital forensics, and threat hunting. Employees benefit from access to state-of-the-art security technologies and a supportive team culture. Our client is committed to fostering career development and provides a clear path for advancement within the cybersecurity team. Additional perks include regular team events and access to employee wellness programs. The company values innovation and encourages employees to contribute new ideas to enhance security operations.