Junior SOC Analyst (MDR) - 24/7 Global Security Ops

BDO South Africa; Cape Town; On-site; ZAR 420,000 - 620,000; Full time

Job summary

BDO South Africa is seeking a SOC Analyst to join our team supporting the 24/7 MDR capability. You will triage security alerts for a global client base, working with the UK SOC manager and an extensive analyst pool. A proactive approach is needed to identify threats, refine alerting, and protect against emerging cyber threats.

You will contribute to best practices, ensure robust operations, and support client engagements and service continuity within defined SLAs.

Qualifications

• Understanding of operating systems and networking basics.
• Experience with Security and Event Management and XDR Solutions.
• Knowledge of MITRE ATT&CK framework.

Responsibilities

• Respond to alerts raised by the SIEM.
• Perform detailed analysis and investigate potential and confirmed security incidents.
• Raise incidents and support the SOC manager during true positive incidents.
• Respond to SOC/MDR client requests and suggestions.
• Assist in onboarding log sources and resolve log issues.
• Fine-tune SIEM/EDR platforms to reduce noise and false positives.
• Conduct use case testing and create/modify as needed.
• Support UK SOC manager in client engagements and service meetings.
• Develop and implement new SOC playbooks and processes.

Skills

OS concepts

Networking basics

SIEM customization

Threat analysis

Communication skills

Education

Cyber security degree/diploma or equivalent experience

MS SC200

Security+

CySA+

Tools

SIEM

EDR

XDR

Microsoft Sentinel

KQL

Job description

BDO South Africa is seeking a SOC Analyst to join our team supporting the 24/7 MDR capability. You will triage security alerts for a global client base, working with the UK SOC manager and an extensive analyst pool. A proactive approach is needed to identify threats, refine alerting, and protect against emerging cyber threats.

You will contribute to best practices, ensure robust operations, and support client engagements and service continuity within defined SLAs.