On-Site Threat Detection Cybersecurity Analyst | SIEM & IR

Placements24; Mbombela (Nelspruit); On-site; ZAR 480,000 - 720,000; Full time

Benefits offered by this job

Competitive salary

On-site in Nelspruit

Health benefits

Training and certifications support

Paid time off

Job summary

Placements24 in South Africa seeks a vigilant Cybersecurity Analyst to join the client’s security operations center in Nelspruit (Mbombela). You will monitor SIEM alerts, investigate threats, and help protect critical assets using advanced tools within a dedicated security team.

The role emphasizes threat detection, incident response, and ongoing improvement of detection rules, with opportunities for specialized training and certifications in a secure on-site environment.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, IT, or related field.
• 3+ years of experience in cybersecurity, focusing on threat detection and incident response.
• Hands-on experience with SIEM tools (Splunk, QRadar, LogRhythm) and IDS/IPS.
• Strong understanding of network security, Windows and Linux operating systems.
• Familiarity with security frameworks such as NIST and ISO 27001.

Responsibilities

• Monitor SIEM systems for suspicious activities and potential breaches.
• Investigate security alerts, incidents, and anomalies to assess impact.
• Perform forensic analysis and root-cause investigation of incidents.
• Develop and refine threat detection rules and correlation logic.
• Respond to incidents following established protocols and coordinate with teams.
• Stay informed about evolving threats and mitigation techniques.

Skills

SIEM experience

Threat detection

Incident response

Windows OS

Linux OS

Network security

Security frameworks

Education

Bachelor's degree in Cybersecurity, Computer Science, IT, or related field

Tools

Splunk

QRadar

LogRhythm

IDS/IPS

Job description

Placements24 in South Africa seeks a vigilant Cybersecurity Analyst to join the client’s security operations center in Nelspruit (Mbombela). You will monitor SIEM alerts, investigate threats, and help protect critical assets using advanced tools within a dedicated security team.

The role emphasizes threat detection, incident response, and ongoing improvement of detection rules, with opportunities for specialized training and certifications in a secure on-site environment.