About the Role
Our client, a diversified conglomerate, is seeking a skilled Information Security Analyst (SOC Level 2) to enhance their Security Operations Center in Polokwane, Limpopo, ZA. This role is pivotal in monitoring, detecting, analyzing, and responding to cybersecurity threats and incidents across the organization's IT infrastructure. You will be responsible for investigating complex security events, performing in-depth analysis, and providing clear recommendations for containment and eradication. The ideal candidate will possess a strong understanding of security operations, threat intelligence, and incident response methodologies. We are looking for a proactive individual who can contribute to maintaining a vigilant security posture and ensuring the swift resolution of security incidents. This position offers a great opportunity to deepen your expertise in a critical security function and work within a dynamic team dedicated to protecting the organization.
Key Responsibilities
- Monitor security alerts and events from various sources, including SIEM, IDS/IPS, and EDR systems.
- Perform in-depth analysis of security incidents to determine scope, impact, and root cause.
- Conduct forensic analysis of security breaches and provide detailed incident reports.
- Develop and refine detection rules and use cases for security monitoring tools.
- Respond to security incidents according to established procedures, including containment, eradication, and recovery.
- Utilize threat intelligence feeds and research to identify emerging threats and vulnerabilities.
- Collaborate with IT teams and stakeholders to implement remediation actions.
- Contribute to the development and maintenance of incident response playbooks.
- Participate in security awareness initiatives and provide technical guidance.
- Stay current with the latest cybersecurity threats, attack vectors, and defense techniques.
Requirements
- Bachelor's degree in Information Security, Computer Science, IT, or a related field, or equivalent work experience.
- 3-5 years of experience in a Security Operations Center (SOC) environment, preferably at Level 2 or higher.
- Strong understanding of SIEM platforms, threat detection tools, and network security concepts.
- Experience with incident response procedures and forensic analysis techniques.
- Familiarity with common attack methodologies and malware analysis is a plus.
- Excellent analytical, critical thinking, and problem-solving skills.
- Strong communication skills, both written and verbal, for clear reporting and collaboration.
- Ability to work effectively under pressure and manage multiple priorities.
- Relevant certifications such as CompTIA CySA+, GSEC, or GCIH are beneficial.
- Experience with scripting (e.g., Python, PowerShell) for automation is an advantage.
Benefits
- Competitive salary and comprehensive benefits package.
- Opportunities for professional growth and advanced training.
- Exposure to a wide range of security technologies and incidents.
- Collaborative and supportive team environment.
- Defined contribution pension scheme.
- Medical aid plan options.
- Potential for overtime pay and shift differentials.