Information Security Incident Responder

Placements24; East London; Hybrid; ZAR 600,000 - 900,000; Full time

Benefits offered by this job

Competitive salary

Medical aid

Retirement fund

Ample paid time off

Hybrid work model

Job summary

Placements24 is seeking an Information Security Incident Responder in East London (Eastern Cape) to detect, analyze, and respond to security incidents. You will work in a dedicated security team to protect digital assets and minimize impact, with a focus on rapid containment and recovery in a hybrid work setup.

The role requires hands-on experience with SIEM tools such as Splunk or QRadar, EDR, and incident response frameworks.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field.
• Minimum of 4 years of experience in information security, with a focus on incident response or security operations.
• Proficiency in using SIEM tools (e.g., Splunk, QRadar) for security monitoring and analysis.
• Experience with endpoint detection and response (EDR) tools and network security monitoring.
• Strong understanding of common attack vectors, malware analysis, and forensic techniques.
• Familiarity with incident response frameworks (e.g., NIST SP 800-61).
• Excellent analytical, problem-solving, and critical thinking skills.
• Strong written and verbal communication skills.
• Ability to work effectively in a team environment and manage multiple tasks simultaneously.
• Relevant security certifications such as GCIH, CEH, CompTIA Security+, or GCFA are highly desirable.

Responsibilities

• Monitor security alerts and events from various sources, including SIEM, IDS/IPS, and EDR systems.
• Analyze security incidents to determine their scope, impact, and root cause.
• Conduct forensic investigations to collect and analyze digital evidence.
• Develop and execute incident response plans, including containment, eradication, and recovery actions.
• Communicate effectively with stakeholders during security incidents, providing timely updates.
• Document all incident response activities, findings, and remediation steps.
• Contribute to the development and refinement of incident response playbooks and procedures.
• Identify and report on emerging threats and vulnerabilities to enhance proactive defense measures.
• Collaborate with other IT and security teams to improve overall security posture.
• Participate in post-incident reviews to identify lessons learned and implement improvements.

Skills

Incident response

Security monitoring

Forensic analysis

Threat intelligence

Team collaboration

Education

Bachelor's degree in Cybersecurity/CS/IT

Tools

SIEM (Splunk/QRadar)

EDR tools

Network security monitoring

Job description

About the Role

Our client, a leading technology solutions provider in East London, Eastern Cape, is looking for a dedicated and skilled Information Security Incident Responder. This role is essential for detecting, analyzing, and responding to security incidents to minimize impact and restore normal operations swiftly. The successful candidate will be part of a dedicated security team, working to protect the organization's digital assets from cyber threats. This position requires a proactive, analytical mindset and the ability to perform under pressure. You will be instrumental in developing and executing effective incident response strategies, ensuring the continued security and integrity of our client's systems and data within East London .

Key Responsibilities

• Monitor security alerts and events from various sources, including SIEM, IDS/IPS, and EDR systems.
• Analyze security incidents to determine their scope, impact, and root cause.
• Conduct forensic investigations to collect and analyze digital evidence.
• Develop and execute incident response plans, including containment, eradication, and recovery actions.
• Communicate effectively with stakeholders during security incidents, providing timely updates.
• Document all incident response activities, findings, and remediation steps.
• Contribute to the development and refinement of incident response playbooks and procedures.
• Identify and report on emerging threats and vulnerabilities to enhance proactive defense measures.
• Collaborate with other IT and security teams to improve overall security posture.
• Participate in post-incident reviews to identify lessons learned and implement improvements.

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field.
• Minimum of 4 years of experience in information security, with a focus on incident response or security operations.
• Proficiency in using SIEM tools (e.g., Splunk, QRadar) for security monitoring and analysis.
• Experience with endpoint detection and response (EDR) tools and network security monitoring.
• Strong understanding of common attack vectors, malware analysis, and forensic techniques.
• Familiarity with incident response frameworks (e.g., NIST SP 800-61).
• Excellent analytical, problem-solving, and critical thinking skills.Strong written and verbal communication skills.
• Ability to work effectively in a team environment and manage multiple tasks simultaneously.
• Relevant security certifications such as GCIH, CEH, CompTIA Security+, or GCFA are highly desirable.

Benefits

• Our client offers a competitive salary and performance-based bonuses.
• Benefits include comprehensive medical aid, a retirement fund, and ample paid time off.
• This role operates on a hybrid model, allowing for a balance of office-based collaboration in East London and remote flexibility.
• Opportunities for professional development, including training courses and certifications, are readily available.