About the Role
Our client, a growing enterprise in the logistics sector located in Durban, seeks a proactive and experienced Cybersecurity Operations Manager. This leadership role is crucial for establishing and overseeing the day-to-day operations of the cybersecurity defense mechanisms. The ideal candidate will be responsible for managing the Security Operations Center (SOC), ensuring timely detection, analysis, and response to security threats. This position offers a fantastic chance to shape the security posture of a significant player in the KwaZulu-Natal region's economy and contribute to its ongoing success.
Key Responsibilities
- Lead and manage the Cybersecurity Operations Center (SOC) team, including shift scheduling, performance management, and professional development.
- Develop, implement, and refine security monitoring, detection, and incident response procedures and playbooks.
- Oversee the effective utilization of SIEM, EDR, SOAR, and other security tools to detect and respond to threats.
- Manage the lifecycle of security incidents from identification and containment to eradication and recovery.
- Conduct regular threat hunting exercises to proactively identify advanced persistent threats (APTs) and other malicious activities.
- Analyze security trends and metrics, providing regular reports and actionable insights to senior management.
- Collaborate with IT infrastructure and application development teams to ensure security best practices are embedded in systems and processes.
- Maintain and improve the organization's security incident response plan, including regular drills and simulations.
Requirements
- Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or a related field.
- Minimum of 6 years of experience in cybersecurity operations, with at least 2 years in a supervisory or managerial role.
- Proven experience in managing a SOC environment and leading security analysts.
- Strong technical expertise in security technologies (SIEM, EDR, IDS/IPS, firewalls) and threat intelligence platforms.
- Solid understanding of cyberattack methodologies, threat actors, and mitigation strategies.
- Excellent leadership, communication, and decision-making skills, particularly under pressure.
- Experience with cloud security (AWS, Azure) and container security is beneficial.
- Relevant certifications such as CompTIA Security+, CEH, GCIH, or similar are preferred.
Benefits
- Attractive salary package with performance-based incentives.
- Comprehensive medical and dental insurance plans.
- Retirement fund contributions.
- Opportunities for continuous learning, certifications, and attendance at industry conferences.
- A collaborative and supportive work culture in Durban.
- Hybrid work arrangement for improved work-life balance.
- Access to state-of-the-art cybersecurity tools and technologies.