Hybrid SOC Engineer: SIEM & Detection Architect

Sasso Consulting; Johannesburg; Hybrid; ZAR 480,000 - 720,000; Full time

Job summary

Sasso Consulting is seeking experienced Cyber Security SOC Engineers to design, implement, configure and maintain enterprise security monitoring and threat detection technologies. You will build and optimise the SOC infrastructure, including SIEM, EDR/XDR, cloud integrations and automation, to support reliable, actionable security data for analysts.

The role emphasizes hands-on SOC engineering, detection engineering and integration across security tools, with a focus on scalable architecture and

Qualifications

• Experience in SOC engineering and security monitoring platforms.
• Proven practical experience with enterprise SIEM deployment and administration.
• Hands-on knowledge of EDR/XDR technologies and SOAR workflows.
• Strong understanding of log ingestion, data parsing and correlation.
• Familiarity with MITRE ATT&CK framework.
• Experience with cloud security monitoring in hybrid environments.
• Strong technical documentation and problem-solving skills.

Responsibilities

• Design, implement and maintain SOC monitoring infrastructure.
• Deploy SIEM, EDR, XDR and related security monitoring technologies.
• Develop detection rules and alerting.
• Configure log collectors and data ingestion pipelines.
• Integrate security tools and cloud services with SIEM.
• Monitor and optimise SIEM performance.
• Provide operational support and platform upgrades.
• Collaborate with SOC analysts and security teams.
• Implement SOAR workflows and automation.

Skills

SOC engineering

SIEM administration

EDR

XDR

SOAR engineering

Security automation

Cloud security monitoring

Threat detection

Scripting

MITRE ATT&CK

Windows/Linux

Education

Information Technology / Cybersecurity degree

Tools

Microsoft Sentinel

Splunk

IBM QRadar

Elastic Security

ArcSight

LogRhythm

Job description

Sasso Consulting is seeking experienced Cyber Security SOC Engineers to design, implement, configure and maintain enterprise security monitoring and threat detection technologies. You will build and optimise the SOC infrastructure, including SIEM, EDR/XDR, cloud integrations and automation, to support reliable, actionable security data for analysts.

The role emphasizes hands-on SOC engineering, detection engineering and integration across security tools, with a focus on scalable architecture and