Hybrid SOC Analyst: Threat Detection & Incident Response

Sasso Consulting; Johannesburg; Hybrid; ZAR 350,000 - 700,000; Full time

Job summary

Sasso Consulting is seeking experienced Cyber Security SOC Analysts to monitor, detect, investigate and respond to threats across complex enterprise IT environments. You will analyze security alerts, investigate incidents and support containment while working in a hybrid arrangement.

Ideal candidates have hands-on SIEM/EDR experience, knowledge of MITRE ATT&CK, and the ability to collaborate with cross-functional teams to improve SOC effectiveness.

Qualifications

• Typically 3–5 years of hands-on cybersecurity monitoring or SOC experience.
• Experience in enterprise SOC or equivalent monitoring environments.
• Strong knowledge of SIEM, EDR/XDR and network security monitoring.

Responsibilities

• Monitor enterprise security systems, networks, endpoints, applications and cloud environments for threats.
• Analyse alerts from SIEM/EDR/XDR and investigate potential incidents.
• Perform initial triage, classification and escalation of incidents.
• Maintain incident timelines and investigation records.
• Collaborate with cybersecurity, infrastructure and application teams.

Skills

SOC monitoring

Incident response

Threat detection

Security event analysis

Threat hunting fundamentals

Collaboration across teams

Education

Relevant diploma/degree in IT or Cybersecurity

Tools

SIEM (Splunk Enterprise Security)

EDR/XDR platforms

Firewall/IDS/IPS monitoring

Cloud security monitoring

MITRE ATT&CK framework

Job description

Sasso Consulting is seeking experienced Cyber Security SOC Analysts to monitor, detect, investigate and respond to threats across complex enterprise IT environments. You will analyze security alerts, investigate incidents and support containment while working in a hybrid arrangement.

Ideal candidates have hands-on SIEM/EDR experience, knowledge of MITRE ATT&CK, and the ability to collaborate with cross-functional teams to improve SOC effectiveness.