Hybrid SOC Analyst - Incident Response & Threat Hunting

S Rminform; Cape Town; Hybride; ZAR 420 000 - 640 000; Plein temps

Avantages offerts par ce poste

Holiday 23–28 days

Medical aid

Life insurance

Pension up to 7%

Hybrid working

Recognition programme

Headspace access

Résumé du poste

S-RM is hiring a SOC Analyst in Cape Town to join our Cyber Security division. You will work across our managed detection and response services, deploying your expertise with SIEM, SOAR, EDR and other tools to protect client environments.

The role is hybrid with two in-office days weekly and requires shifting as part of a 24/7 schedule. Candidates with 2–3 years in an SOC and relevant certifications are encouraged to apply.

Qualifications

• Bachelor’s degree in cyber security, information security or related discipline.
• Certifications such as CySA+, SC-100/SC-200, GCIH, CSA, and blue team/SOC level certs.

Responsabilités

• Monitor security events using EDR, SIEM and related tools to detect threats.
• Conduct investigations and respond to security incidents with containment steps.
• Threat hunting and proactive IoC/advanced threat searches.
• Tune detection rules and automate incident workflows.
• Analyze logs from firewalls and endpoints to investigate incidents.
• Stay updated on threats and collaborate with threat intel teams.
• Document incidents, responses and resolutions in the incident mgmt process.
• Participate in a 24/7 shift rotation including evenings and weekends.

Connaissances

SIEM

SOAR

EDR

XDR

Windows OS

Linux OS

Active Directory

Microsoft 365 security

Azure security

SIEM rules

MSSP/MDR

MITRE ATT&CK

Formation

Bachelor’s degree in cyber security, Information Security, Computer Science, or related discipline

CompTIA CySA+

SC-100/SC-200

GIAC Certified Incident Handler (GCIH)

Certified SOC Analyst (CSA)

Blue Team / SOC Level 1 or 2 (CyberDefenders or THM)

Outils

SOAR platforms

Description du poste

S-RM is hiring a SOC Analyst in Cape Town to join our Cyber Security division. You will work across our managed detection and response services, deploying your expertise with SIEM, SOAR, EDR and other tools to protect client environments.

The role is hybrid with two in-office days weekly and requires shifting as part of a 24/7 schedule. Candidates with 2–3 years in an SOC and relevant certifications are encouraged to apply.