Mid-Level Cyber Security Analyst (SOC)

60 Degrees; Wes-Kaap; Hybrid; ZAR 350,000 - 650,000; Full time

Benefits offered by this job

Hybrid work (Cape Town)

International exposure

Career development

Job summary

60 Degrees is seeking a hands-on Cyber Security Analyst to join its growing SOC team delivering security services to UK and international clients. You’ll work in a modern SOC environment focusing on incident investigations, containment and remediation, while collaborating with experienced analysts across geographic regions.

You will monitor Microsoft Sentinel and Defender XDR, perform threat hunting with KQL, and contribute to automation, playbooks and reporting.

Qualifications

• 2-3+ years' experience in a SOC or Security Operations environment.
• Hands-on experience in a live operational SOC, with exposure to real-world incident investigation and response
• Hands-on experience with Microsoft Sentinel and Microsoft Defender XDR
• Experience using KQL for investigations, threat hunting and detection tuning
• Familiarity with Entra ID and the wider Microsoft security ecosystem
• Good understanding of cyber threats, attack techniques and security frameworks
• Strong networking, Windows and Linux fundamentals
• SC-200 certification (or willingness to obtain it within 12 months)
• Comfortable with occasional UK and client-site travel

Responsibilities

• Investigating and responding to security alerts and incidents.
• Monitoring and analysing security activity across Microsoft Sentinel and Defender technologies.
• Conducting threat hunting and security investigations using KQL.
• Carrying out initial containment and remediation activities.
• Improving detection quality by identifying trends and reducing false positives.
• Contributing to automation, reporting, playbooks and operational improvements.
• Working closely with senior analysts while mentoring more junior team members

Skills

SOC operations

Incident response

Threat hunting

KQL

MS Sentinel

Defender XDR

Entra ID

Windows fundamentals

Linux fundamentals

Travel willingness

Education

SC-200 certification

Tools

Microsoft Sentinel

Microsoft Defender XDR

KQL

Entra ID

PowerShell

Python

Job description

Join a growing cyber security team delivering managed security services to clients across the UK and internationally.

Working in a modern Security Operations (SOC) environment, you'll gain exposure to a broad range of security incidents, threat investigations and detection activities while collaborating with experienced analysts across international teams.

This is an excellent opportunity for an analyst who enjoys getting to the root cause of security events and wants to continue building their career in a hands-on operational SOC.

YOUR KEY RESPONSIBILITIES

You'll play a key role in protecting client environments by:

• Investigating and responding to security alerts and incidents.
• Monitoring and analysing security activity across Microsoft Sentinel and Defender technologies.
• Conducting threat hunting and security investigations using KQL.
• Carrying out initial containment and remediation activities.
• Improving detection quality by identifying trends and reducing false positives.
• Contributing to automation, reporting, playbooks and operational improvements.
• Working closely with senior analysts while mentoring more junior team members.

OUR REQUIRED EXPERTISE

• 2-3+ years' experience in a SOC or Security Operations environment
• Demonstrable hands-on experience in a live operational SOC, with exposure to real-world incident investigation and response
• Hands-on experience with Microsoft Sentinel and Microsoft Defender XDR
• Experience using KQL for investigations, threat hunting and detection tuning
• Familiarity with Entra ID and the wider Microsoft security ecosystem
• Good understanding of cyber threats, attack techniques and security frameworks
• Strong networking, Windows and Linux fundamentals
• SC-200 certification (or willingness to obtain it within 12 months)
• Comfortable with occasional UK and client-site travel

Advantageous:

• MSSP or multi-client experience
• PowerShell or Python
• Security automation, Logic Apps or SOAR exposure
• Defender for Cloud, Purview, Splunk, Elastic or CrowdStrike experience

YOUR REWARD

• Exposure to international clients and complex security environments
• Clear development path towards a Senior Cyber Security Analyst role
• Additional compensation for participating in after-hours incident support and escalation coverage.
• Ongoing learning and career development within a collaborative security team
• Hybrid, Cape Town-based role with working hours aligned to the UK team and client base

For more roles, please have a look at our website (www.60degrees.com) or follow us on LinkedIn (https://www.linkedin.com/company/10287263/)