Information Security Analyst - SIEM Specialist

Placements24; East London; Hybrid; ZAR 600,000 - 800,000; Full time

Benefits offered by this job

Remote work

Medical, dental, and vision insurance

Professional development allowance

Performance bonuses

Job summary

Placements24 is seeking an Information Security Analyst with SIEM specialization to join a remote-first security operations team. You will configure, tune, and manage the SIEM platform, develop detection rules, and analyze events to identify threats in a fully remote environment.

The role emphasizes proactive threat detection, incident response, and collaboration across security functions, leveraging advanced SIEM capabilities in a distributed team.

Qualifications

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or related field.
• 2-4 years of information security experience with a focus on SIEM administration and analysis.
• Hands-on experience with major SIEM platforms (Splunk, QRadar, ArcSight, LogRhythm).

Responsibilities

• Configure, manage, and optimize SIEM platform for high availability and performance.
• Develop, test, and implement custom detection rules, correlation searches, and alerts.
• Analyze SIEM logs and events to investigate incidents and policy breaches.
• Collaborate with security team to enhance threat intel feeds and log sources.
• Participate in security incident response using SIEM data.
• Perform health checks and tune SIEM to reduce false positives.
• Document SIEM configurations, rules, and procedures.

Skills

Log management

Event correlation

Threat detection

Analytical thinking

Education

Bachelor's degree in IT/Cybersecurity/CS

Tools

Splunk

QRadar

ArcSight

LogRhythm

Job description

About the Role

Our client is actively searching for a skilled Information Security Analyst with a specialization in SIEM technologies to join their expanding security operations team in a fully remote capacity. This role is critical for optimizing the detection, analysis, and response to security threats by leveraging advanced SIEM capabilities. You will be responsible for configuring, tuning, and managing the SIEM platform, developing effective detection rules, and analyzing security events to identify and mitigate risks. This position is ideal for a proactive analyst passionate about threat detection and response, seeking to make a significant impact within a cutting-edge, remote-first security environment.

Key Responsibilities

• Configure, manage, and optimize the Security Information and Event Management (SIEM) platform, ensuring high availability and performance.
• Develop, test, and implement custom detection rules, correlation searches, and alerts within the SIEM to identify potential security threats and policy violations.
• Analyze security logs and events generated by the SIEM to investigate potential security incidents and policy breaches.
• Collaborate with other security team members to enhance threat intelligence feeds and integrate new log sources into the SIEM.
• Participate in the security incident response process, providing expert analysis from SIEM data during investigations.
• Perform regular health checks and tuning of the SIEM system to reduce false positives and improve alert accuracy.
• Document SIEM configurations, rules, and operational procedures.

Requirements

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field, or equivalent experience.
• 2-4 years of experience in information security , with a specific focus on SIEM administration and analysis.
• Hands-on experience with major SIEM platforms (e.g., Splunk, QRadar, ArcSight, LogRhythm).
• Strong understanding of log management, event correlation, and threat detection methodologies.
• Familiarity with various operating systems (Windows, Linux), network protocols, and common attack vectors.
• Excellent analytical skills, problem-solving abilities, and attention to detail in a remote work setting.

Benefits

• Competitive salary package with regular performance reviews and potential bonuses.
• Fully remote employment offering flexibility and autonomy.
• Comprehensive medical, dental, and vision insurance.
• Generous allowance for professional development, training, and certifications in cybersecurity and SIEM technologies.
• Opportunity to work with advanced security tools and contribute to a highly skilled, distributed security team.