Lead Cybersecurity Analyst (Threat Detection)

Placements24; Polokwane; On-site; ZAR 900,000 - 1,200,000; Full time

Benefits offered by this job

Health and life insurance

Performance-based bonuses

Advanced training and certifications

Pension plan

Job summary

Placements24 is seeking a Lead Cybersecurity Analyst to head our client's Security Operations Center in Polokwane. The role focuses on threat detection, incident response, and security monitoring, guiding a team of analysts and refining detection strategies.

You will oversee vulnerability assessments, threat hunting, and incident coordination, while staying ahead of emerging threats in a Polokwane-based, on-site environment.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field.
• 6+ years in cybersecurity with at least 2 years in a lead/senior analyst role.
• Experience with SIEM systems (Splunk, QRadar, ArcSight).
• Strong knowledge of network, endpoint, and cloud security principles.
• Experience with incident response methodologies and tools.
• Certifications such as CISSP, GCIA, GCIH are desirable.

Responsibilities

• Lead and mentor a team of cybersecurity analysts in threat detection, analysis, and incident response.
• Develop and refine advanced threat detection rules and signatures using SIEM and other tools.
• Monitor security alerts, perform forensic analysis, and investigate incidents.
• Coordinate and lead incident response, containment, eradication, and recovery.
• Conduct vulnerability assessments and penetration testing; manage remediation.
• Develop and maintain security policies, procedures, and documentation.
• Stay updated on threats and mitigation techniques; perform threat hunting.

Skills

Leadership

SIEM analytics

Network security

Endpoint security

Cloud security

Incident response

Log analysis

Threat intelligence

Security policy

Decision making

Education

Bachelor's degree in Cybersecurity/Computer Science/IT

Tools

Splunk

QRadar

ArcSight

Job description

About the Role

Our client, a leading financial services institution, is seeking a skilled and experienced Lead Cybersecurity Analyst to join their dedicated security operations center in Polokwane. This crucial role involves leading efforts in threat detection, incident response, and security monitoring to protect the organization's critical assets and data. You will be responsible for guiding a team of analysts, developing advanced detection strategies, and staying ahead of emerging cyber threats. The position is based in our client's secure facility in Polokwane, requiring full-time, on-site presence for operational continuity and team collaboration.

Key Responsibilities

• Lead and mentor a team of cybersecurity analysts in threat detection, analysis, and incident response activities.
• Develop, implement, and refine advanced threat detection rules and signatures using SIEM and other security tools.
• Monitor security alerts and events, perform forensic analysis, and investigate potential security incidents.
• Coordinate and lead incident response efforts, ensuring timely and effective containment, eradication, and recovery.
• Conduct vulnerability assessments and penetration testing, and manage remediation efforts.
• Develop and maintain security policies, procedures, and documentation.
• Stay current with the latest cybersecurity threats, vulnerabilities, and mitigation techniques.
• Perform threat hunting to proactively identify and neutralize advanced threats.
• Provide regular reports on security posture, incident trends, and recommendations to management.
• Collaborate with IT and other departments to ensure security best practices are integrated across the organization.
• Contribute to the continuous improvement of the Security Operations Center (SOC) capabilities in Polokwane.

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field.
• Minimum of 6 years of experience in cybersecurity, with at least 2 years in a lead or senior analyst role.
• Extensive experience with Security Information and Event Management (SIEM) systems (e.g., Splunk, QRadar, ArcSight).
• Strong understanding of network security, endpoint security, and cloud security principles.
• Proficiency in analyzing various types of logs and network traffic.
• Experience with incident response methodologies and tools.
• Knowledge of common attack vectors, malware analysis, and threat intelligence.
• Relevant cybersecurity certifications (e.g., CISSP, GCIA, GCIH) are highly desirable.
• Excellent analytical, problem-solving, and decision-making skills.
• Strong leadership, communication, and interpersonal skills.
• Ability to work effectively under pressure in a Polokwane-based, in-office security operations environment.

Benefits

• Our client offers a competitive salary, comprehensive health and life insurance, performance-based bonuses, and opportunities for advanced training and certifications.
• Employees benefit from working in a stable, secure environment in Polokwane with access to advanced security tools and technologies.
• Additional benefits include a generous pension fund, paid time off, and a supportive team culture dedicated to safeguarding the organization.
• Join a critical team in Polokwane responsible for maintaining robust cybersecurity defenses.