Information Security Analyst - SIEM Specialist

Placements24; Gqeberha; Hybrid; ZAR 450,000 - 650,000; Full time

Benefits offered by this job

Competitive salary

Hybrid work arrangement

Medical and retirement benefits

Access to cutting-edge security tools

Supportive team in Port Elizabeth

Job summary

Placements24 is seeking an Information Security Analyst with a focus on SIEM to join their security operations center in Port Elizabeth. The role involves monitoring security events, analyzing threats, and ensuring optimal SIEM operation, with opportunities to enhance threat detection within a hybrid work setting.

You will contribute to incident response, log source integration, and ongoing improvement of monitoring capabilities while collaborating with a dedicated security team using advanced

Qualifications

• Bachelor's degree in IT or Cybersecurity is required.
• 3+ years in information security focusing on SIEM tools.
• Solid understanding of security principles and network protocols.
• Experience with incident response and forensic techniques.
• Scripting skills (Python, Bash) are beneficial.
• Relevant certifications such as CompTIA Security+, GIAC GCIH, or SIEM certifications are a plus.

Responsibilities

• Monitor, analyze, and respond to security alerts from the SIEM platform.
• Develop and tune SIEM rules, dashboards, and reports to enhance threat detection.
• Conduct incident investigations and forensic analysis.
• Coordinate with IT teams to ensure log sources are integrated into the SIEM.
• Stay updated on cyber threats and security technologies.

Skills

SIEM

Python scripting

Incident response

Education

Bachelor's degree in Information Technology or Cybersecurity

Tools

Splunk

QRadar

ArcSight

Job description

Our client is looking for a specialized Information Security Analyst with a focus on SIEM technologies to join their security operations center in Port Elizabeth . This role is crucial for monitoring security events, analyzing threats, and ensuring the effective operation of the Security Information and Event Management system. You will play a key part in detecting and responding to security incidents, enhancing threat detection capabilities, and supporting the overall security posture of the organization. This hybrid role offers a great opportunity to work with a dedicated security team and leverage advanced security tools in a collaborative setting.

Key Responsibilities

• Monitor, analyze, and respond to security alerts generated by the SIEM platform.
• Develop and tune SIEM rules, dashboards, and reports to enhance threat detection.
• Perform security incident investigations, including data collection and forensic analysis.
• Collaborate with IT teams to ensure log sources are properly integrated into the SIEM.
• Stay updated on the latest cyber threats, vulnerabilities, and security technologies.
• Contribute to the continuous improvement of security monitoring and incident response processes.

Requirements

• Bachelor's degree in Information Technology, Cybersecurity, or a related field.
• 3+ years of experience in information security, with a strong focus on SIEM tools (e.g., Splunk, QRadar, ArcSight).
• Solid understanding of security principles, network protocols, and common attack vectors.
• Experience with incident response and forensic investigation techniques.
• Proficiency in scripting (e.g., Python, Bash) for automation tasks is beneficial.
• Relevant certifications such as CompTIA Security+, GIAC GCIH, or SIEM-specific certifications are a plus.

Benefits

• Competitive salary and performance incentives.
• Hybrid work arrangement providing work-life balance.
• Comprehensive medical and retirement benefits.
• Access to cutting-edge security tools and technologies.
• A professional and supportive team environment in Port Elizabeth .