About the Role
Our client, a rapidly growing cybersecurity firm, is actively seeking an experienced Lead Security Operations Center (SOC) Analyst to head their SOC operations in Centurion, Gauteng . This leadership role is crucial for directing the daily activities of the SOC team, ensuring rapid detection, analysis, and response to security incidents. You will be responsible for refining SOC processes, managing incident response workflows, and mentoring junior analysts. This is a fantastic opportunity to make a significant impact on a company's security posture and to lead a team of dedicated security professionals in a challenging and rewarding environment.
Key Responsibilities
- Lead and manage the Security Operations Center (SOC) team, providing guidance and oversight.
- Develop and optimize SOC procedures for incident detection, triage, analysis, and response.
- Monitor security alerts and events using SIEM, EDR, and other security tools.
- Conduct in-depth analysis of security incidents, including root cause analysis and impact assessment.
- Manage the incident response lifecycle, ensuring timely and effective resolution.
- Develop and maintain threat intelligence feeds and indicators of compromise (IOCs).
- Create and present regular reports on SOC performance, incidents, and trends to management.
- Mentor and train junior SOC analysts, fostering their technical and analytical skills.
- Stay current with the latest cybersecurity threats, attack vectors, and defensive strategies.
Requirements
- Bachelor's degree in Cybersecurity, Computer Science, or a related discipline.
- Minimum of 6 years of experience in a Security Operations Center (SOC) environment, with at least 2 years in a lead or supervisory role.
- Extensive experience with SIEM platforms (e.g., Splunk, QRadar), IDS/IPS, and EDR solutions.
- Deep understanding of incident response methodologies and best practices.
- Proficiency in threat analysis, malware analysis, and forensic investigation techniques.
- Strong leadership, communication, and interpersonal skills.
- Ability to work under pressure and make critical decisions during security incidents.
- Relevant certifications such as GCIH, GCFA, or CISSP are highly preferred.
- Experience with scripting for automation (e.g., Python) is an advantage.
Benefits
- A competitive annual salary of R.
- Comprehensive medical, dental, and vision insurance.
- Generous retirement savings plan.
- Paid vacation and sick leave.
- Hybrid work arrangements for better work-life balance.
- Professional development and training opportunities.
- Opportunity to lead and shape a critical security function.