Cybersecurity Operations Center (SOC) Analyst - Level 2

Placements24; Durban; On-site; ZAR 420,000 - 560,000; Full time

Benefits offered by this job

Medical aid

Pension fund

Paid annual leave

On-going training

Certifications

Job summary

Placements24 is seeking a Cybersecurity Operations Center (SOC) Analyst (Level 2) for our client in Durban, KwaZulu-Natal. The role requires monitoring, investigating, and responding to security events to protect critical assets within a 24/7 SOC environment.

You will work in shifts, providing mentorship to Level 1 analysts and refining incident response playbooks while collaborating closely with a dedicated security team.

Qualifications

• Bachelor’s or Diploma in IT/Cybersecurity or related field.
• 3+ years of SOC or similar cybersecurity operations experience.
• Hands-on with SIEM platforms (Splunk, ELK/QRadar).
• Knowledge of attack vectors, malware, intrusion techniques, and networking basics.

Responsibilities

• Monitor SIEM for suspicious activity and analyze alerts.
• Investigate security incidents, determine scope and impact.
• Triage and contain incidents per playbooks; escalate as needed.
• Contribute to incident response playbooks and SOPs.
• Mentor SOC Level 1 analysts and participate in on-call rotations.

Skills

Analytical thinking

Communication skills

Work under pressure

Team collaboration

Education

Diploma or Bachelor’s degree in IT/Cybersecurity

Tools

Splunk

ELK Stack

QRadar

EDR tools

Job description

About the Role

Our client, a prominent financial services institution, is looking for a skilled and vigilant Cybersecurity Operations Center (SOC) Analyst (Level 2) to join their security team in Durban, KwaZulu-Natal. This critical role involves the continuous monitoring of network and system activities, investigation of security alerts, and response to cyber threats to protect the organization's assets. You will be part of a dedicated team working in shifts to ensure 24/7 security coverage. The ideal candidate possesses a strong understanding of threat landscapes, incident response procedures, and various security technologies. This is a fantastic opportunity to work in a challenging and rewarding environment, contributing directly to the security and stability of a major South African enterprise. The role is office-based, providing an opportunity for direct collaboration and mentorship within the SOC team, fostering a strong sense of camaraderie and shared responsibility for protecting our client's sensitive information.

Key Responsibilities

• Monitor security information and event management (SIEM) systems for suspicious activities.
• Analyze security alerts and logs to identify potential threats and policy violations.
• Conduct in-depth investigations of security incidents, determining scope and impact.
• Perform initial triage and containment of security incidents according to established playbooks.
• Escalate complex incidents to senior analysts or incident response teams.
• Utilize various security tools (e.g., IDS/IPS, firewalls, endpoint protection) for threat hunting and analysis.
• Develop and refine incident response playbooks and SOPs.
• Contribute to threat intelligence gathering and analysis.
• Assist in the maintenance and tuning of security tools.
• Generate regular reports on security incidents and SOC activities.
• Participate in on-call rotations as required.
• Provide guidance and mentorship to SOC Level 1 analysts.

Requirements

• Diploma or Bachelor's degree in Information Technology, Cybersecurity, or a related field.
• Minimum of 3 years of experience in a SOC or similar cybersecurity operational role.
• Hands-on experience with SIEM platforms (e.g., Splunk, ELK Stack, QRadar).
• Knowledge of common attack vectors, malware, and intrusion techniques.
• Familiarity with networking protocols and security concepts (TCP/IP, HTTP/S, DNS).
• Experience with endpoint detection and response (EDR) tools.
• Strong analytical and critical thinking skills.
• Ability to work effectively under pressure and manage multiple priorities.
• Excellent written and verbal communication skills.
• Understanding of forensic principles is a plus.
• Willingness to work in shifts, including potential night and weekend coverage.

Benefits

• Competitive salary based on experience.
• Comprehensive medical aid plan.
• Pension fund with employer contribution.
• Paid annual leave and sick leave.
• Opportunities for professional development and certifications (e.g., CompTIA Security+, GCIH).
• Exposure to a wide range of security technologies and challenges.
• Structured career progression path within the cybersecurity team.
• Modern office facilities in a convenient Durban location.
• Employee assistance program.