L2 SOC Analyst

Pronel Consultants; Johannesburg; On-site; ZAR 550,000 - 900,000; Full time

Job summary

Pronel Consultants is seeking an experienced L2 SOC Analyst to join the security team in Johannesburg. You will perform threat hunting, incident response, and security monitoring across SIEM/EDR platforms, while developing playbooks and automating SOC tasks.

You will work with the Microsoft security stack (Defender, Intune, Azure) and contribute to security maturity, investigations, and cross-functional communication with senior stakeholders.

Qualifications

• 3+ years’ experience in a SOC environment
• 5+ years in cybersecurity
• Strong experience with SIEM, EDR, vulnerability management, threat hunting, and incident response
• Good knowledge of the Microsoft Security stack, including Defender, Intune, Azure, and Entra ID
• Experience with Microsoft Sentinel / Azure Sentinel is highly desirable
• Scripting experience with PowerShell, Python, and/or Regex
• Understanding of security frameworks such as ISO 27001, NIST, CIS, or PCI DSS
• Experience with endpoint protection, cloud security, DLP, CASB, and managed security services
• Strong analytical, investigative, and problem-solving skills
• Excellent communication skills, with the confidence to present security findings to senior and C-level stakeholders
• A proactive mindset and genuine passion for cybersecurity and continuous learning

Responsibilities

• Perform proactive threat hunting, monitoring, investigation, and incident response.
• Investigate security alerts and incidents, conduct root cause analysis, and drive remediation.
• Develop and maintain incident response playbooks and SOC procedures.
• Automate repetitive SOC tasks, alerts, and reporting using scripting and security tooling.
• Monitor and improve our security technologies, including SIEM, EDR, endpoint, cloud, and DLP solutions.
• Identify vulnerabilities and security risks and recommend effective mitigation strategies.
• Support security audits, reporting, risk assessments, and compliance requirements.
• Research emerging threats, vulnerabilities, and attack techniques.
• Evaluate and test new security products and technologies.
• Help improve SOC processes, controls, and overall security maturity.
• Mentor and support junior analysts.
• Participate in an out-of-hours on-call rota when required.

Skills

Threat hunting

Incident response

Security monitoring

Analytical thinking

Mentoring

Tools

Microsoft Sentinel

Azure Sentinel

Defender

Intune

Azure

Entra ID

PowerShell

Python

Regex

Job description

Our client is looking for an experienced L2 SOC Analyst to join their security team and play a key role in protecting the company’s systems, data, and people.

This is a hands-on role for someone who enjoys threat hunting, incident investigation, security automation, and continuous improvement. You’ll work with a range of security technologies, help strengthen the companies security controls, and support the development of a proactive and effective SOC capability.

What You’ll Do

• Perform proactive threat hunting, monitoring, investigation, and incident response.

• Investigate security alerts and incidents, conduct root cause analysis, and drive remediation.

• Develop and maintain incident response playbooks and SOC procedures.

• Automate repetitive SOC tasks, alerts, and reporting using scripting and security tooling.

• Monitor and improve our security technologies, including SIEM, EDR, endpoint, cloud, and DLP solutions.

• Identify vulnerabilities and security risks and recommend effective mitigation strategies.

• Support security audits, reporting, risk assessments, and compliance requirements.

• Research emerging threats, vulnerabilities, and attack techniques.

• Evaluate and test new security products and technologies.

• Help improve SOC processes, controls, and overall security maturity.

• Mentor and support junior analysts.

• Participate in an out-of-hours on-call rota when required.

What You’ll Bring

• 3+ years’ experience in a SOC environment and 5+ years in cybersecurity.

• Strong experience with SIEM, EDR, vulnerability management, threat hunting, and incident response.

• Good knowledge of the Microsoft Security stack, including Defender, Intune, Azure, and Entra ID.

• Experience with Microsoft Sentinel / Azure Sentinel is highly desirable.

• Scripting experience with PowerShell, Python, and/or Regex.

• Understanding of security frameworks such as ISO 27001, NIST, CIS, or PCI DSS.

• Experience with endpoint protection, cloud security, DLP, CASB, and managed security services.

• Strong analytical, investigative, and problem-solving skills.

• Excellent communication skills, with the confidence to present security findings to senior and C-level stakeholders.

• A proactive mindset and genuine passion for cybersecurity and continuous learning.

Certifications

Relevant certifications are highly desirable, including:

• Microsoft SC-200, SC-300, SC-400, AZ-500 or AZ-900

• CompTIA Security+ or Network+

• BTL1

• Mimecast or other relevant security/vendor certifications.

Why Join Our client?

This is an opportunity to take a key role with this international client, working with modern cybersecurity technologies, hunt real-world threats, and make a tangible impact on the company’s security posture.

If you’re a curious, proactive security professional who enjoys solving problems and staying one step ahead of attackers, we’d love to hear from you.