Lead Cybersecurity Analyst

Placements24; Mtubatuba Local Municipality; Híbrido; ZAR 900 000 - 1 500 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Health insurance

Performance bonuses

Training budget

Flexible hours

Fully remote work

Resumo da oferta

Placements24 is seeking an experienced Lead Cybersecurity Analyst to join a fully remote security operations center. You will guide a team of analysts, oversee threat detection, incident response, and security monitoring, and drive improvements in SOC processes and tools.

The ideal candidate has 7+ years in cybersecurity, including 3+ years in leadership, and hands-on expertise with Splunk, QRadar, and ArcSight, plus CISSP/GIAC/CISM certifications are desirable.

Qualificações

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field.
• 7+ years cybersecurity experience, with 3+ years in a lead/SOC supervisory role.
• Proven threat detection, incident response and forensic analysis experience.

Responsabilidades

• Lead and mentor a team of cybersecurity analysts in daily SOC operations.
• Oversee monitoring of security alerts and logs from various sources to detect threats.
• Coordinate incident response activities including investigation, containment, eradication, and recovery.
• Develop and refine threat detection rules and correlation logic within SIEM tools.
• Perform in-depth forensic analysis to determine root cause and impact.
• Stay current with latest cyber threats and attack vectors.
• Create incident response playbooks and documentation.
• Collaborate with security teams and IT to enhance security posture.

Conhecimentos

Team leadership

Threat detection

Incident response

Forensic analysis

Security monitoring

Formação académica

Bachelor's degree in Cybersecurity

Ferramentas

Splunk

QRadar

ArcSight

Descrição da oferta de emprego

About the Role

Our client, a leading global technology consulting firm, is seeking an experienced Lead Cybersecurity Analyst to join their fully remote security operations center (SOC). This role offers the unique opportunity to work from anywhere, contributing to the protection of critical digital assets for a diverse range of clients. You will be responsible for leading a team of cybersecurity analysts, overseeing threat detection, incident response, and security monitoring activities. This position demands a deep understanding of current cyber threats, advanced analytical skills, and the ability to manage complex security investigations. The ideal candidate is a proactive leader with a passion for cybersecurity and a commitment to staying ahead of emerging threats. Join an innovative and collaborative remote team where your expertise will be instrumental in safeguarding sensitive information and maintaining robust security postures for our client's partners.

Key Responsibilities

• Lead and mentor a team of cybersecurity analysts in daily SOC operations.
• Oversee the monitoring of security alerts and logs from various sources to detect potential threats.
• Manage and coordinate incident response activities, including investigation, containment, eradication, and recovery.
• Develop and refine threat detection rules, signatures, and correlation logic within SIEM and other security tools.
• Conduct in-depth forensic analysis of security incidents to determine root cause and impact.
• Stay current with the latest cybersecurity threats, vulnerabilities, and attack vectors.
• Develop and maintain incident response playbooks and documentation.
• Collaborate with other security teams and IT departments to implement security enhancements.
• Provide expert analysis and recommendations on security posture improvements.
• Contribute to the continuous improvement of SOC processes, tools, and technologies.

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field.
• Minimum of 7 years of experience in cybersecurity, with at least 3 years in a lead or supervisory role within a SOC environment.
• Proven experience with threat detection, incident response, and forensic analysis.
• Expertise in using SIEM tools (e.g., Splunk, QRadar, ArcSight) and various security monitoring technologies.
• Strong understanding of networking protocols, operating systems (Windows, Linux), and common attack vectors.
• Experience with vulnerability management and penetration testing concepts.
• Relevant certifications such as CISSP, GIAC certifications (GCIH, GCFA), or CISM are highly desirable.
• Excellent analytical, problem-solving, and critical thinking skills.
• Strong leadership, communication, and interpersonal skills.

Benefits

• This fully remote position offers a highly competitive salary, comprehensive health, dental, and vision insurance, performance bonuses, a generous allowance for professional development and training, flexible working hours, and the opportunity to work on challenging and impactful cybersecurity initiatives from anywhere.