Lead Security Operations Center (SOC) Analyst (Remote)

Placements24; George; Hybrid; ZAR 900,000 - 1,500,000; Full time

Benefits offered by this job

Competitive compensation

Remote work flexibility

Health insurance

Professional development

Paid time off

Job summary

Placements24 in South Africa is seeking an experienced Lead SOC Analyst to helm remote security operations. You will lead a distributed team, drive real-time threat detection, incident response, and improve SOC processes across the organization.

The ideal candidate has 7+ years in SOC/IR with leadership, strong SIEM/EDR experience, and a track record of protecting digital infrastructure in remote or virtual environments.

Qualifications

• Bachelor's degree or equivalent extensive experience in CS/Cybersecurity.
• 7+ years in SOC operations or incident response, with 2+ years in leadership.
• Strong SIEM/EDR experience and cloud security fundamentals.
• Proven ability to lead remote teams under pressure.

Responsibilities

• Lead, mentor, and manage a remote SOC team.
• Oversee continuous monitoring of alerts, logs, and threat intel.
• Direct incident response activities and coordinate resolution.
• Develop and refine SOC playbooks, procedures, and workflows.
• Analyze incidents to identify root causes and preventative measures.

Skills

Leadership

SOC operations

Incident response

Remote team management

Education

Bachelor's degree in Computer Science / Cybersecurity

Tools

Splunk

QRadar

ELK Stack

Job description

About the Role

Our client is seeking an experienced and dynamic Lead Security Operations Center (SOC) Analyst to spearhead their remote security monitoring efforts. This pivotal role is based in a fully remote capacity, empowering you to contribute your expertise from anywhere. You will be responsible for leading a team of SOC analysts, overseeing real-time threat detection, incident response, and continuous improvement of security operations. The ideal candidate possesses exceptional leadership qualities, a deep understanding of threat landscapes, and a proven ability to manage high-pressure situations within a virtual team structure. This position is integral to our client's commitment to maintaining a secure digital infrastructure and protecting against sophisticated cyber-attacks. You will define and implement best practices for SOC operations, ensuring optimal performance and rapid response capabilities in a distributed work environment. Embrace this opportunity to shape the future of security operations for a leading organization.

Key Responsibilities

• Lead, mentor, and manage a team of SOC analysts in a remote setting.
• Oversee the continuous monitoring of security alerts, logs, and threat intelligence feeds.
• Direct and coordinate incident response activities, ensuring timely and effective resolution of security breaches.
• Develop and refine SOC playbooks, procedures, and workflows for efficiency and effectiveness.
• Analyze security incidents to determine root causes and implement preventative measures.
• Manage and optimize security tools and technologies within the SOC environment (SIEM, EDR, IDS/IPS).
• Conduct threat hunting exercises to proactively identify emerging threats.
• Report on SOC performance metrics, incident trends, and security posture to senior management.
• Stay current with the latest cyber threats, attack vectors, and defensive technologies.
• Champion a culture of continuous improvement within the SOC team.

Requirements

• Bachelor's degree in Computer Science, Cybersecurity, or a related field, or equivalent extensive experience.
• Minimum of 7 years of experience in SOC operations or incident response, with at least 2 years in a leadership role.
• Extensive experience with SIEM platforms (e.g., Splunk, QRadar, ELK Stack) and EDR solutions.
• Strong understanding of network protocols, operating systems, and common attack methodologies.
• Demonstrated ability to lead and manage a remote team effectively.
• Excellent analytical, communication, and decision-making skills under pressure.
• Experience with scripting languages (e.g., Python, PowerShell) for automation is a plus.
• Relevant certifications like GCIH, GCFA, CISSP are advantageous.
• Proven ability to manage complex security incidents.
• Demonstrated understanding of cloud security principles.

Benefits

• Our client offers a highly competitive compensation package, including an attractive base salary and performance-based bonuses.
• comprehensive health, dental, and vision insurance, a generous retirement savings plan, and ample paid time off.
• Professional development opportunities, including training and certifications, are actively supported.
• As a fully remote position, you will enjoy significant flexibility and the ability to work from your preferred location within George, Western Cape, ZA , or beyond.

Our client fosters a collaborative and inclusive virtual work environment, emphasizing employee well-being and career growth. This is an excellent opportunity to advance your career in security leadership and make a tangible impact on a global scale.