Information Security Analyst - Incident Response Specialist

Placements24; Soweto; Hybrid; ZAR 550,000 - 900,000; Full time

Benefits offered by this job

Competitive annual salary package

Medical aid and retirement benefits

Professional development and training

Job summary

Placements24 in Soweto, Gauteng, is seeking an Information Security Analyst with a focus on incident response to join its security operations team. You will monitor alerts, investigate incidents, and help contain threats using SIEM, EDR, and forensic tools in a hybrid work setting.

The role requires a 3+ year security background, a relevant degree, and hands-on experience. You'll collaborate with IT, Legal, and Communications, contribute to threat intelligence, and support professional

Qualifications

• Bachelor's degree in CS, Cybersecurity, IT, or equivalent practical experience.
• Minimum 3 years in information security with incident response focus.
• Hands-on with SIEM, EDR, network analysis and forensic tools.

Responsibilities

• Monitor security alerts from SIEM, IDS/IPS, and EDR to identify incidents.
• Investigate incidents to determine scope, impact, and root cause.
• Contain, eradicate, and recover compromised systems and data.
• Perform forensic analysis of breaches and log examination.
• Develop and maintain incident response playbooks.
• Collaborate with IT, Legal, and Communications during incidents.
• Contribute to threat intel gathering to enhance detection.
• Participate in post-incident reviews and improvements.

Skills

SIEM

EDR

Forensic tools

Log analysis

Python scripting

Incident response

Threat intelligence

Communication skills

Education

Bachelor's degree in CS/Cybersecurity/IT

Tools

SIEM software

EDR tools

Network analysis tools

Forensic tools

Job description

About the Role

Our client is seeking a dedicated and skilled Information Security Analyst with a specialization in Incident Response to join their security operations team. This role is pivotal in protecting the organization from cyber threats by promptly detecting, analyzing, and responding to security incidents. You will be at the forefront of safeguarding sensitive data and systems, working with advanced tools and methodologies to contain threats and minimize impact. This is an excellent opportunity for a proactive security professional to grow their career within a dynamic environment in Soweto, Gauteng , with a hybrid work arrangement.

Key Responsibilities

• Monitor security alerts and events from various security tools (SIEM, IDS/IPS, EDR) to identify potential security incidents.
• Investigate and analyze security incidents, determining their scope, impact, and root cause.
• Perform timely containment, eradication, and recovery of compromised systems and data.
• Conduct forensic analysis of security breaches, including malware analysis and log examination.
• Develop and maintain incident response playbooks and procedures.
• Collaborate with internal teams (IT, Legal, Communications) and external stakeholders during incident response activities.
• Contribute to threat intelligence gathering and analysis to enhance detection capabilities.
• Participate in post-incident reviews to identify lessons learned and implement improvements.
• Stay up-to-date with the latest security threats, vulnerabilities, and incident response techniques.
• Assist in vulnerability management activities and remediation efforts.

Requirements

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field, or equivalent practical experience.
• Minimum of 3 years of experience in information security, with a strong focus on incident response or security operations.
• Hands-on experience with SIEM, EDR, network analysis tools, and forensic tools.
• Understanding of common attack vectors, malware, and threat actor methodologies.
• Proficiency in analyzing system logs, network traffic, and endpoint data.
• Knowledge of incident response frameworks and best practices.
• Scripting skills (e.g., Python) for automation are a plus.
• Strong analytical and problem-solving abilities with meticulous attention to detail.
• Excellent communication and interpersonal skills, with the ability to work effectively under pressure.
• Relevant certifications such as CompTIA Security+, CEH, or GCIH are advantageous.
• Ability to work effectively in a hybrid capacity in Soweto, Gauteng.

Benefits

• Competitive annual salary package.
• Comprehensive medical aid and retirement fund benefits.
• Opportunities for professional development, training, and certifications.
• Generous annual leave allowance.
• Access to advanced security tools and technologies.
• Supportive team environment focused on continuous learning and improvement.