Cybersecurity Operations Analyst - SOC Level 2

Placements24; Stellenbosch; On-site; ZAR 350,000 - 700,000; Full time

Benefits offered by this job

Competitive salary

Medical aid

Provident fund

Performance-based bonuses

Team events

Wellness programs

Job summary

Placements24 is seeking a Cybersecurity Operations Analyst to join its SOC team in Paarl, Western Cape. You will investigate and respond to security alerts, analyze threats, and mitigate impacts on digital assets using SIEM, IDS/IPS, and EDR tools.

The role requires a 3+ year SOC/IR background, strong networking knowledge, and hands-on experience with SIEM platforms like Splunk, QRadar, or LogRhythm. On-site in Paarl with growth opportunities.

Qualifications

• Degree or equivalent practical experience in a relevant field.
• 3+ years in SOC or incident response.
• Experience with SIEM platforms (Splunk, QRadar, LogRhythm).
• Strong networking and security principle knowledge.
• Experience with EDR and antivirus technologies.
• Scripting for automation is a plus.

Responsibilities

• Monitor and analyze security alerts from SIEM/EDR and other tools.
• Investigate incidents and determine scope and impact.
• Contain, eradicate, and recover from incidents.
• Perform forensic analysis and collect evidence.
• Develop detection rules and use cases for monitoring tools.
• Analyze malware samples and IOCs from threat intel.
• Document incident actions and lessons learned.
• Collaborate with security and IT teams to resolve issues.
• Participate in on-call rotation for IR.
• Stay updated on threats and attack techniques.

Skills

Bachelor's degree in Computer Science/

3+ years SOC/IR experience

SIEM platforms

Networking fundamentals

EDR/antivirus knowledge

Scripting for automation (Python/Power

Analytical problem-solving

Communication and teamwork

Security certifications advantageous

Education

Bachelor's degree in Computer Science, Information Security, or related field

Tools

Splunk

QRadar

LogRhythm

Job description

About the Role

Our client, a rapidly expanding e-commerce platform, is seeking a skilled Cybersecurity Operations Analyst to join their Security Operations Center (SOC) team. This is a critical Level 2 role responsible for investigating and responding to security alerts, analyzing threats, and mitigating potential impacts on the organization's digital assets. You will work with advanced security tools, including SIEM, IDS/IPS, and EDR solutions, to monitor network and system activity. The position is based in our client's secure operations center in Paarl, Western Cape . We are looking for a proactive, detail-oriented individual with strong analytical skills and a passion for cybersecurity incident response. This role offers an excellent opportunity to gain hands-on experience with a wide range of security technologies and threats in a fast-paced environment.

Key Responsibilities

• Monitor and analyze security alerts from various security tools (SIEM, IDS/IPS, EDR, etc.).
• Investigate potential security incidents, performing in-depth analysis to determine scope and impact.
• Respond to security incidents, providing timely containment, eradication, and recovery actions.
• Conduct forensic analysis of security events and collect evidence.
• Develop and refine detection rules and use cases for security monitoring tools.
• Analyze malware samples and threat intelligence to identify indicators of compromise (IOCs).
• Document incident details, actions taken, and lessons learned.
• Collaborate with other security team members and IT departments to resolve security issues.
• Participate in on-call rotation for incident response.
• Stay updated on the latest cybersecurity threats, vulnerabilities, and attack techniques.

Requirements

• Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent practical experience.
• Minimum of 3 years of experience in a Security Operations Center (SOC) or incident response role.
• Proven experience with SIEM platforms (e.g., Splunk, QRadar, LogRhythm).
• Strong understanding of networking protocols (TCP/IP), common attack vectors, and security principles.
• Experience with endpoint security solutions (EDR) and antivirus technologies.
• Familiarity with scripting languages (e.g., Python, PowerShell) for automation is a plus.
• Excellent analytical and problem-solving skills with the ability to make quick, informed decisions.
• Strong communication and teamwork abilities.
• Relevant security certifications such as CompTIA Security+, CySA+, GCIH, or CEH are advantageous.
• Must be eligible to work in South Africa .

Benefits

• Our client offers a competitive salary, comprehensive medical aid, a provident fund, and performance-based bonuses.
• The Paarl, Western Cape office provides a collaborative and secure working environment.
• This role offers significant opportunities for professional growth, including advanced training in incident response, digital forensics, and threat hunting.
• Employees benefit from access to state-of-the-art security technologies and a supportive team culture.
• Our client is committed to fostering career development and provides a clear path for advancement within the cybersecurity team.
• Additional perks include regular team events and access to employee wellness programs.
• The company values innovation and encourages employees to contribute new ideas to enhance security operations.