L2 SOC Analyst: Threat Hunting & Incident Response

Armstrong Appointments; Cape Town; On-site; ZAR 480,000 - 720,000; Full time

Job summary

Armstrong Appointments is seeking an L2 SOC Analyst to join our client, an IT Managed Service Provider, based in Cape Town or Gauteng. You will provide level 2 support, escalate as needed, and perform threat hunting and investigations on a day-to-day basis.

You will help drive compliance and SOC strategy using company tooling to enhance services for clients, with proactive security and quality outcomes. On-call duties may apply to after-hours incidents.

Qualifications

• Experience in SOC operations with SIEM/EDR
• MSP/MSSP experience
• 3+ years in a SOC environment
• Threat hunting and incident response experience
• Familiarity with ISO, PCI DSS, CIS, or NIST controls

Responsibilities

• Ongoing threat hunting for clients and internally for Company.
• Automating tasks, alert and report creation on SOC activities.
• Continuous monitoring of and action on internal and client security systems.
• Detecting and responding to security events and protecting information assets.
• Assisting in delivering security services and products to clients.
• Coaching and mentoring of junior analysts.
• Participation in on-call rota for out-of-hours incidents.
• Communicate with customers about incident progress and outages.

Skills

Threat hunting

Incident response

On-call support

Coaching

Automation

Education

MS AZ-900

MS AZ-500

MS SC-200

MS SC-300

MS SC-400

CompTIA N+

CompTIA S+

Mimcast certified

BTL1

Tools

SIEM

EDR

Azure Sentinel

Intune

Defender

Job description

Armstrong Appointments is seeking an L2 SOC Analyst to join our client, an IT Managed Service Provider, based in Cape Town or Gauteng. You will provide level 2 support, escalate as needed, and perform threat hunting and investigations on a day-to-day basis.

You will help drive compliance and SOC strategy using company tooling to enhance services for clients, with proactive security and quality outcomes. On-call duties may apply to after-hours incidents.