Information Security Analyst (SIEM Specialist)

Placements24; Johannesburg; Hybrid; ZAR 520,000 - 900,000; Full time

Benefits offered by this job

Competitive salary

Health and wellness benefits

Professional development budgets

Career growth opportunities

Collaborative team environment

Job summary

Placements24 in Randburg, Gauteng is seeking an Information Security Analyst with a SIEM focus to deploy, tune and operate SIEM solutions, analyze logs, and respond to security events, strengthening monitoring capabilities.

The ideal candidate will work with Splunk, QRadar, or ELK Stack, develop detection rules, perform threat hunting, and contribute to incident response in a fintech context.

Qualifications

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or related field.
• Minimum 3 years in information security operations focusing on SIEM management and analysis.
• Hands-on experience with one or more leading SIEM platforms.

Responsibilities

• Deploy, configure, and maintain SIEM platforms (e.g., Splunk, QRadar, ELK Stack).
• Develop and optimize SIEM rules, correlation logic, and alerts to detect security incidents effectively.
• Monitor SIEM dashboards and alerts, investigate suspicious activities, and perform initial triage.
• Analyze security logs from various sources to identify potential threats.
• Conduct threat hunting activities using SIEM data and other security tools.
• Develop and maintain SIEM documentation, including use cases, procedures, and runbooks.
• Collaborate with IT and security teams to ensure adequate log collection and data normalization.
• Participate in incident response activities, providing SIEM expertise.
• Stay up-to-date with the latest security threats, vulnerabilities, and SIEM best practices.
• Contribute to the continuous improvement of the organization's security monitoring capabilities.

Skills

SIEM management

Log analysis

Threat hunting

Python/PowerShell scripting

Education

Bachelor's degree in IT/CS/Cybersecurity

Tools

Splunk

QRadar

ELK Stack

Job description

About the Role

Our client, a prominent player in the financial technology sector, is looking for a skilled Information Security Analyst with a specialization in Security Information and Event Management (SIEM) systems, to join their expanding team. This role is based in Randburg, Gauteng , and will focus on the deployment, configuration, tuning, and ongoing operation of SIEM solutions to enhance the organization's security monitoring and incident detection capabilities. You will be responsible for analyzing security logs, identifying malicious activities, and responding to security events in a timely and effective manner. This is an exciting opportunity to work with advanced SIEM technologies and contribute directly to the protection of critical financial data. The ideal candidate will have a deep understanding of security operations, log analysis, and threat hunting. You will play a vital role in maintaining a strong security posture against sophisticated cyber threats.

Key Responsibilities

• Deploy, configure, and maintain SIEM platforms (e.g., Splunk, QRadar, ELK Stack).
• Develop and optimize SIEM rules, correlation logic, and alerts to detect security incidents effectively.
• Monitor SIEM dashboards and alerts, investigate suspicious activities, and perform initial triage.
• Analyze security logs from various sources (servers, firewalls, applications) to identify potential threats.
• Conduct threat hunting activities using SIEM data and other security tools.
• Develop and maintain SIEM documentation, including use cases, procedures, and runbooks.
• Collaborate with IT and security teams to ensure adequate log collection and data normalization.
• Participate in incident response activities, providing SIEM expertise.
• Stay up-to-date with the latest security threats, vulnerabilities, and SIEM best practices.
• Contribute to the continuous improvement of the organization's security monitoring capabilities.

Requirements

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field.
• Minimum of 3 years of experience in information security operations, with a strong focus on SIEM management and analysis.
• Hands-on experience with one or more leading SIEM platforms.
• Proficiency in log analysis and understanding of various log formats.
• Knowledge of common security threats, attack vectors, and incident response procedures.
• Familiarity with scripting languages (e.g., Python, PowerShell) for automation is a plus.
• Strong analytical and problem-solving skills.
• Excellent communication and teamwork abilities.
• Relevant certifications (e.g., CompTIA Security+, GIAC certifications related to SIEM or SOC analysis) are desirable.
• Ability to work independently and manage multiple priorities.

Benefits

• Competitive salary and performance-based incentives.
• Opportunity to specialize in SIEM technologies in Randburg, Gauteng .
• Comprehensive health and wellness benefits.
• Professional development opportunities and training budgets.
• A collaborative and supportive team environment.
• Exposure to cutting-edge security technologies in the FinTech industry.
• Generous annual leave and company holidays.
• Opportunities for career growth within the security team.