Lead Security Operations Center (SOC) Analyst

Placements24; Mtubatuba Local Municipality; Hybrid; ZAR 1,000,000 - 1,600,000; Full time

Benefits offered by this job

Salary + performance bonuses

Medical aid and retirement fund

Advanced security training

Hybrid work model

Richards Bay location

Team events

Job summary

Placements24 in Richards Bay, KwaZulu-Natal, is seeking a Lead SOC Analyst to head the Security Operations Center. You will drive real-time monitoring, threat detection, and incident response, guiding a team of analysts to strengthen the organization's security posture.

The ideal candidate has 7+ years in information security, with at least 3 years in a SOC and leadership experience, strong SIEM expertise, and a track record of developing playbooks and tactical response.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or a related field.
• At least 7 years in information security with 3+ years in a SOC environment and 2+ years in lead/senior roles.
• Experience with SIEM platforms (Splunk, QRadar, LogRhythm).

Responsibilities

• Lead a team of SOC Analysts.
• Oversee real-time monitoring of security alerts and events.
• Develop and refine incident detection and response procedures.
• Conduct in-depth analysis of security incidents and threats.
• Manage and optimize SIEM tools and other security technologies.
• Create regular reports on security incidents and trends.
• Collaborate with IT and other departments to implement security improvements.
• Stay updated on cyber threats, vulnerabilities, and attack techniques.
• Ensure compliance with security policies and regulatory requirements.
• Contribute to security playbooks and operational guides.

Skills

Leadership

SOC operations

SIEM

Incident response

Threat intelligence

Networking basics

Python scripting

Communication

Hybrid work

Education

Bachelor's degree in CS/InfoSec

Tools

Splunk

QRadar

LogRhythm

Job description

About the RoleOur client, a prominent industrial group located in Richards Bay, KwaZulu-Natal , requires a Lead SOC Analyst to spearhead their Security Operations Center. This leadership role is essential for managing the continuous monitoring of the organization's IT infrastructure, detecting and responding to security threats in real-time, and ensuring the overall security posture. You will lead a team of analysts, provide expert guidance, and develop strategies to enhance threat detection capabilities. The ideal candidate will possess strong leadership skills, extensive experience in SOC operations, and a deep understanding of incident response. This position offers a challenging yet rewarding opportunity to significantly impact the cybersecurity resilience of a major enterprise. We are committed to building a robust defense against cyber threats and empowering our security team with the best tools and training. The role involves collaborating with various departments to ensure a unified approach to security.

Key Responsibilities

• Leading and mentoring a team of SOC Analysts.
• Overseeing real-time monitoring of security alerts and events.
• Developing and refining incident detection and response procedures.
• Conducting in-depth analysis of security incidents and threats.
• Managing and optimizing SIEM tools and other security technologies.
• Creating regular reports on security incidents and trends.
• Collaborating with IT and other departments to implement security improvements.
• Staying updated on the latest cyber threats, vulnerabilities, and attack techniques.
• Ensuring compliance with security policies and regulatory requirements.
• Contributing to the development of security playbooks and operational guides.

Requirements

• A Bachelor's degree in Computer Science, Information Security, or a related field.
• At least 7 years of experience in information security, with a minimum of 3 years in a SOC environment and 2 years in a lead or senior role.
• Extensive experience with SIEM platforms (e.g., Splunk, QRadar, LogRhythm).
• Proficiency in threat intelligence analysis and incident response methodologies.
• Strong understanding of networking protocols, operating systems, and common attack vectors.
• Experience with scripting for automation (e.g., Python).
• Excellent leadership, communication, and problem-solving skills.
• Ability to work effectively in a hybrid environment.
• Relevant certifications such as GCIA, GCIH, CISSP, or OSCP are highly desirable.
• Experience in an industrial or operational technology (OT) environment is a plus.

Benefits

• Attractive salary and performance-based bonuses.
• Comprehensive medical aid and retirement fund contributions.
• Opportunities for advanced security training and certifications.
• Exposure to diverse security challenges in a large enterprise.
• A hybrid work model offering flexibility.
• Career growth opportunities within the organization in Richards Bay, KwaZulu-Natal .
• Contribution to critical national infrastructure security.
• Team events and a positive work culture.