Cybersecurity Operations Center (SOC) Analyst - Level 2

Placements24; Pretoria; On-site; ZAR 600,000 - 900,000; Full time

Benefits offered by this job

Medical Aid

Retirement Fund

Performance incentives

Training & Certifications

Job summary

Placements24 is seeking a Cybersecurity Operations Center (SOC) Analyst Level 2 for a leading financial services client in Centurion, Gauteng, ZA. This is a full‑time, in‑office role requiring on‑site presence to ensure rapid response within the SOC.

You will monitor alerts, investigate complex threats, expand detection rules, and collaborate with Tier 1 analysts to document incidents and drive SOC improvements.

Qualifications

• Bachelor's degree in Cybersecurity, CS, or related field or equivalent work experience.
• Minimum 3 years in a SOC, with at least 1 year at Level 2.
• Strong networking knowledge (TCP/IP) and familiarity with threats.
• Experience with SIEM and endpoint security tools.
• Certifications such as Security+, CySA+, GCIH are a plus.

Responsibilities

• Monitor and analyze security alerts from SIEM, IDS/IPS, and EDR systems.
• Conduct in-depth investigations into potential security incidents and determine root causes.
• Develop and refine detection rules and use cases for SIEM and other tools.
• Coordinate with Tier 1 analysts and incident responders during security events.
• Produce detailed incident reports and post-incident reviews.
• Contribute to SOC process and procedure improvements.

Skills

Threat detection

Incident response

Analytical thinking

Pressure management

Education

Bachelor's degree

Tools

Splunk

LogRhythm

Wireshark

EDR tools

Job description

About the Role

Our client, a prominent financial services institution, is looking for an experienced Cybersecurity Operations Center (SOC) Analyst at Level 2 to join their dedicated security team. This role is based at their corporate office in Centurion, Gauteng, ZA , and requires a full-time, in-office presence to ensure immediate response and collaboration within the SOC environment. You will be responsible for monitoring security alerts, investigating complex threats, and escalating incidents as necessary. This position offers a challenging and rewarding career path within a critical function of the organization, protecting sensitive data and client information from sophisticated cyberattacks.

Key Responsibilities

• Monitor and analyze security alerts from various sources, including SIEM, IDS/IPS, and endpoint detection systems.
• Perform in-depth investigations into potential security incidents, identifying root causes and scope.
• Develop and refine detection rules and use cases for SIEM and other security tools.
• Conduct forensic analysis of security breaches and malware activity.
• Coordinate with Tier 1 analysts and incident responders during security events.
• Produce detailed incident reports and post-incident reviews.
• Contribute to the continuous improvement of SOC processes and procedures.
• Maintain up-to-date knowledge of current threat landscapes and vulnerabilities.

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, or a related technical field, or equivalent work experience.
• Minimum of 3 years of experience working in a SOC environment, with at least 1 year at a Level 2 or equivalent role.
• Strong understanding of networking protocols, TCP/IP, and common security threats.
• Proficiency in using SIEM tools (e.g., Splunk, LogRhythm) and endpoint security solutions.
• Experience with packet analysis tools (e.g., Wireshark) and malware analysis techniques.
• Familiarity with incident response methodologies and frameworks.
• Excellent analytical and critical thinking skills.
• Ability to work effectively under pressure in a fast-paced environment.
• Relevant certifications such as Security+, CySA+, GCIH are a plus.

Benefits

This position comes with a competitive salary and a comprehensive benefits package, including medical aid, a retirement fund, and performance incentives. Our client invests in employee development through continuous training programs, opportunities for advanced certifications, and exposure to diverse security technologies. Located in Centurion, Gauteng, ZA , the office environment is modern and collaborative. Employees also benefit from career advancement opportunities within a stable and respected financial institution.