Level 2 Soc Analyst

Netsurit Group; Johannesburg; Hybrid; ZAR 60,000 - 90,000; Full time

Job summary

A leading company is looking for a Senior SOC Analyst in Johannesburg. The successful candidate will be responsible for monitoring and responding to security incidents, improving the organization’s security posture, and mentoring team members. Ideal candidates should have extensive experience in security monitoring and incident response, along with relevant certifications.

Qualifications

• 5-8 years in support and infrastructure operations.
• Experience with security monitoring tools and infrastructure security.
• Strong understanding of networking and common attack methods.

Responsibilities

• Monitor and analyze security events from various sources.
• Respond to security incidents and perform root cause analysis.
• Develop and maintain playbooks and documentation for incident response.

Skills

Security monitoring

Incident response

Problem-solving

Communication

Education

Relevant certifications (CySA, CEH, GIAC)

Microsoft Certifications (AZ-SC)

Tools

SIEM tools

EDR solutions

PowerShell

Python

KQL

Ansible

Docker

Kubernetes

Job description

Job Title : Senior SOC AnalystJob Location : JohannesburgJob Model : HybridOverview : Our organization is looking for a skilled and experienced Senior SOC Analyst to join our team.

The successful candidate will be responsible for monitoring, detecting, and responding to security incidents in our organization's environment.

The Senior SOC Analyst will also work closely with the security operations team to improve the security posture of the organization.Key Responsibilities : Monitor and analyze security events from various sources, including but not limited to network traffic, log files, and endpoint devices.Respond to security incidents, including performing investigation and root cause analysis to determine the scope, impact, and severity of the incident.Recommend remediation actions and work with the security operations team to implement them.Develop and maintain playbooks, procedures, and other documentation to streamline the incident response process.Participate in security incident response exercises, tabletop exercises, and other activities to improve the organization's security posture.Provide guidance and mentorship to other members of the security operations team.Stay up-to-date with the latest security threats, vulnerabilities, and mitigation strategies.Work with other teams in the organization to ensure that security controls are effectively implemented and maintained.Contribute to the development and implementation of the organization's security policies, standards, and procedures.Coordinate with SIEM Engineers to tune Alerts and Events.Required Skills and Qualifications : 5-8 years in support and infrastructure operations.At least 5 years of experience in infrastructure, with a focus on security monitoring.Experience with security monitoring tools, including SIEM, IDS / IPS, EDR, and threat intelligence platforms.Experience with Intune and M Defender, Identity Access Management.Strong understanding of networking, operating systems, and common attack methods.Experience with scripting and automation using languages such as Python, PowerShell, or KQL is a plus.Familiarity with security frameworks and standards such as NIST, CIS, and ISO is a plus.Excellent problem-solving skills and attention to detail.Strong written and verbal communication skills.Ability to work independently and as part of a team.Preferred Qualifications : Relevant certifications such as CySA, CEH, GIAC, Firewall and networking certifications are advantageous.Microsoft Certifications : AZ-SC-Experience with cloud security in Azure platforms.Knowledge of DevOps practices within Azure and tools such as Ansible, Docker, and Kubernetes would be advantageous.Familiarity with identity and access management technologies and processes.Ability to think creatively and strategically about security challenges.