Mid-Level Cyber Security Analyst (Soc)

60Degrees; Cape Town; Híbrido; ZAR 420.000 - 600.000; Jornada completa

Descripción de la vacante

60Degrees in Cape Town is seeking a SOC Engineer (L2) to deliver managed security services to clients across South Africa, the UK and the UAE. This role goes beyond alert monitoring, focusing on threat detection engineering, automation, investigation of complex threats, and ongoing improvements to clients' security posture.

You will work with Microsoft Sentinel, Defender XDR and the wider Microsoft stack, solving security challenges and shaping outcomes.

Formación

• 2-3+ years in a SOC or Security Operations environment.
• Hands-on live operational SOC experience with incident response.
• Hands-on with Microsoft Sentinel and Defender XDR.
• Experience using KQL for investigations and threat hunting.
• Familiarity with Entra ID and Microsoft security ecosystem.
• Willingness to travel occasionally to UK client sites.

Responsabilidades

• Investigating and responding to security alerts and incidents across multiple client environments.
• Designing, improving and tuning detections within Microsoft Sentinel and Defender.
• Conducting proactive threat hunting and security investigations using KQL.
• Developing automation, Logic Apps, playbooks and operational workflows.
• Controlling containment, remediation and recovery during incidents.
• Identifying trends and opportunities to improve detection coverage.
• Assisting onboarding of new security technologies and client environments.
• Collaborating with clients and internal teams to strengthen security operations.

Conocimientos

SOC operations

Microsoft Sentinel

Defender XDR

KQL

Entra ID

Threat hunting

PowerShell

Python

Herramientas

PowerShell

Python

Descripción del empleo

Job Description

THE OPPORTUNITY THAT AWAITS YOU

Join an innovative and fast-growing cyber security consultancy as a SOC Engineer (L2), delivering managed security services to clients across South Africa, the UK and the UAE.

This isn't a traditional "alert monitoring" SOC role.

You'll join a modern Microsoft-focused security practice where SOC Engineers are encouraged to go beyond incident response and actively contribute to improving clients' security posture. You'll be involved in threat detection engineering, security automation, investigation of sophisticated threats, tuning security tools, developing operational playbooks, and helping shape security outcomes for a diverse client base.

Working across Microsoft Sentinel, Defender XDR and the broader Microsoft Security stack, you'll gain exposure to complex client environments while collaborating with experienced security professionals locally and internationally.

This opportunity is ideal for someone who enjoys understanding how security platforms work under the hood, solving complex security challenges and continuously developing their engineering, threat detection and incident response capabilities.

YOUR KEY RESPONSIBILITIES

You'll play a key role in protecting client environments by:

• Investigating and responding to security alerts and incidents across multiple client environments.
• Designing, improving and tuning security detections within Microsoft Sentinel and Defender.
• Conducting proactive threat hunting and security investigations using KQL.
• Developing and enhancing automation, Logic Apps, playbooks and operational workflows.
• Performing containment, remediation and recovery activities during security incidents.
• Identifying trends, gaps and opportunities to improve detection coverage and reduce false positives.
• Assisting with the onboarding and integration of new security technologies and client environments.
• Contributing to security engineering initiatives, reporting frameworks and service improvements.
• Collaborating directly with clients and internal teams to strengthen security operations and outcomes.

OUR REQUIRED EXPERTISE

Essential

• 2-3+ years' experience in a SOC or Security Operations environment
• Demonstrable hands-on experience in a live operational SOC, with exposure to real-world incident investigation and response
• Hands-on experience with Microsoft Sentinel and Microsoft Defender XDR
• Experience using KQL for investigations, threat hunting and detection tuning
• Familiarity with Entra ID and the wider Microsoft security ecosystem
• Good understanding of cyber threats, attack techniques and security frameworks
• Strong networking, Windows and Linux fundamentals
• SC-200 certification (or willingness to obtain it within 12 months)
• Comfortable with occasional UK and client-site travel

Advantageous

• MSSP or multi-client experience
• PowerShell or Python
• Security automation, Logic Apps or SOAR exposure
• Defender for Cloud, Purview, Splunk, Elastic or CrowdStrike experience

YOUR REWARD

• Exposure to both security operations and security engineering, providing a clear pathway into Senior SOC Engineering, Detection Engineering or Cyber Security Consulting roles.
• Clear development path towards a Senior Cyber Security Analyst role
• Additional compensation for participating in after-hours rotational incident support and escalation coverage
• Ongoing learning and career development within a collaborative security team
• Hybrid, Cape Town-based role with working hours aligned to the UK team and client base