Junior SOC Analyst

Europa Worldwide Group; Cape Town; On-site; ZAR 216,000 - 360,000; Full time

Benefits offered by this job

Competitive package

20 days annual leave

Family leave

Job summary

Europa Worldwide Group is seeking a Junior SOC Analyst to protect IT systems and data. You will work within the Security Operations Centre, monitoring environments and responding to incidents with state-of-the-art tooling.

After initial training you’ll rotate four 12-hour shifts followed by four days off to provide 24/7 coverage across the group, contributing to continuous improvement of detection and alerting.

Qualifications

• 1+ years of experience in cyber security, preferably within a SOC or security monitoring role.
• Hands-on experience using a SIEM solution for security monitoring, alert triage and log analysis.
• Experience with Endpoint Detection and Response (EDR) technologies for investigating and containing endpoint threats.
• Confident analysing emails, including reading and interpreting email headers to identify spoofing and phishing.
• Familiarity with MITRE ATT&CK framework and common attacker techniques.
• Exposure to Microsoft security tooling (Defender for Endpoint, Defender for Office 365).

Responsibilities

• Deliver 24/7 threat monitoring, detection, event management and incident response on a rotational shift basis.
• Triage and prioritise security alerts from the SIEM platform and escalate incidents with clear findings.
• Analyse security log data from endpoints, network devices, cloud services and identity platforms to determine root cause and impact.
• Use SIEM, EDR and email security tooling to detect, contain and analyse threats.
• Investigate suspicious emails, identify phishing attempts and take remediation action.
• Monitor systems for unusual activity and follow playbooks and escalation procedures.
• Record incidents and outcomes in the ticketing system and hand over to on-going investigations.
• Contribute to updates of detection rules and SOC playbooks to reduce false positives.

Skills

SIEM

EDR

Threat monitoring

Incident response

Phishing analysis

Email security

Security fundamentals

Education

CompTIA Security+

Tools

Microsoft Defender

Job description

Europa Worldwide Group is an ambitious and independently owned logistics business. We operate across three divisions - Europa Road, Europa Air & Sea, and Europa Warehouse – and our continued success has earned us a place in The Sunday Times Top Track 250 for three consecutive years.

With 15 sales offices across the UK and Ireland, plus a strong and expanding international footprint in Europe, and countries such as, Hong Kong, China, India, and Dubai, we’re investing heavily in our people, our infrastructure, and our future.

If you’re looking to be part of a forward-thinking organisation where your contribution genuinely makes an impact, Europa is a place where you can grow and thrive.

We are looking for

The Junior SOC Analyst plays a vital part in protecting Europa Worldwide Group’s IT systems, networks and data from unauthorised access, theft and cyber attack. Working within our Security Operations Centre, you will act as the first line of defence, continuously monitoring the environment, detecting security incidents and responding to them quickly and effectively using state-of-the-art tooling.

Following initial training, you will work a rotational schedule of four consecutive 12-hour workdays followed by four days off, ensuring continuous 24-hour coverage across the group.

What can we offer in return?

• Competitive Package: up to ZAR30,000pm depending on experience.
• Generous time off: 20 days of annual leave.
• Family leave: Enhanced maternity, paternity and adoption pay.
• Wellbeing focus: Access to our employee wellbeing programme supporting your overall health and happiness.
• Work-life balance: A fantastic working culture that promotes an excellent work-life balance.
• Recognition: Celebrate your contributions with our charity 50-50 and long service awards.

What you will be doing:

• Monitoring and response: Deliver 24/7 threat monitoring, detection, event management and incident response on a rotational shift basis, acting as the first responder to security alerts.
• Alert triage: Triage and prioritise security alerts from the SIEM platform, distinguishing genuine threats from false positives and escalating confirmed incidents to senior analysts with clear, well-documented findings.
• Investigation: Analyse security log data from multiple event sources (endpoints, network devices, cloud services, identity platforms and email) to establish the root cause, scope and impact of incidents.
• Security tooling: Use SIEM, Endpoint Detection and Response (EDR) and email security tooling to detect, contain and analyse threats, including isolating compromised endpoints and blocking malicious indicators under guidance.
• Phishing analysis: Investigate suspicious and reported emails, analysing headers, attachments and URLs to identify phishing, spoofing and business email compromise attempts, and take appropriate remediation action.
• Proactive monitoring: Monitor systems, networks and applications for unusual or anomalous activity and investigate in a timely manner, following documented playbooks and escalation procedures.
• Documentation and handover: Record incidents, investigation steps and outcomes accurately in the ticketing system, and complete thorough shift handovers so that ongoing investigations continue seamlessly across the rota.
• Continuous improvement: Contribute to the continuous improvement of detection rules, alert tuning and SOC playbooks by feeding back on false positives and gaps identified during investigations.
• Threat awareness: Stay up to date with the latest cyber security threats, vulnerabilities, attacker techniques and defensive trends, and share relevant intelligence with the wider team.
• Change control: Work under strict change control processes to ensure only authorised changes are carried out within the environment.
• Out-of-hours support: Provide first line IT Helpdesk assistance outside of standard business hours, resolving or escalating user issues in line with agreed service levels.

Our Ideal Person:

• 1+ years of experience in cyber security, preferably within a SOC or security monitoring role.
• Hands-on experience using a SIEM solution for security monitoring, alert triage and log analysis.
• Experience with Endpoint Detection and Response (EDR) technologies for investigating and containing endpoint threats.
• Confident analysing emails, including reading and interpreting email headers to identify spoofing and phishing.
• Relevant qualifications such as CompTIA Security+ or equivalent, or demonstrable equivalent knowledge.
• Ability to work calmly under pressure, prioritise effectively and respond to incidents quickly and methodically.
• Strong written and verbal communication skills, with the ability to document findings clearly for technical and non-technical audiences.
• Comfortable working a 24/7 shift rotation, including nights, weekends and public holidays.
• Passionate about cyber security and committed to continuous learning.
• Familiarity with the MITRE ATT&CK framework and common attacker techniques.
• Exposure to Microsoft security tooling (e. g. Defender for Endpoint, Defender for Office 365).
• Basic understanding of security fundamentals.

Europa Worldwide Group do not accept agency CV submissions unless specifically requested/ engaged with the role by the Internal Talent Team. Please do not submit speculative CV’S to our Talent Team, Colleagues, Hiring Managers, or any branches/locations directly. Europa will not be responsible for any fees related to CV’s received in this unsolicited manner.

Please note - if you submit your CV, you are giving Europa Worldwide Group Ltd, and its subsidiaries consent to hold your personal data. All applications will be dealt with according to General Data Protection Regulations. Europa Worldwide Group are committed to equality of opportunity for all staff, and applications from individuals are encouraged regardless of age, disability, sex, gender reassignment, sexual orientation, pregnancy and maternity, race, religion or belief and marriage and civil partnerships.

Please note that an offer of employment is subject to the completion of a satisfactory pre-employment checks.