Remote Security Incident Response Specialist

Placements24; East London; Hybrid; ZAR 600.000 - 1.100.000; Vollzeit

Benefits dieser Stelle

Health coverage

Paid time off

Remote work

Professional development

Retirement plan

Zusammenfassung

Placements24 is seeking a skilled Remote Security Incident Response Specialist to join a globally distributed security team. The role emphasizes supporting operations in the East London, Eastern Cape region while delivering remote incident detection, analysis, and response across IT infrastructure.

You will lead IR procedures, conduct forensics, and develop playbooks to minimize breach impact. The ideal candidate has 4–6 years in security operations and relevant certifications, with strong

Qualifikationen

• Bachelor's degree or equivalent practical experience in cybersecurity, CS, or related field.
• 4–6+ years in security operations, IR, or digital forensics.
• Knowledge of incident response frameworks (e.g., NIST).
• Hands-on with SIEM/EDR and forensic tools (Volatility, FTK, Wireshark).
• Familiarity with networks, Windows/Linux, and attack vectors.
• Strong written/spoken communication; ability to document findings.

Aufgaben

• Monitor alerts/logs from SIEM/IDS/EDR to detect incidents.
• Analyze incidents to determine scope, impact, root cause.
• Lead containment, eradication, and recovery efforts.
• Conduct digital forensics to collect evidence and timelines.
• Develop/maintain incident response playbooks and docs.
• Collaborate with SOC, threat intel, IT teams during IR.
• Perform post-incident reviews and recommend improvements.
• Stay updated on new threats and IR techniques.
• Communicate status and findings to technical and mgmt teams.

Kenntnisse

Incident response

SIEM/EDR

Digital forensics

Analytical thinking

Documentation

Ausbildung

Bachelor's degree in Cybersecurity or related field

Tools

SIEM tools

EDR solutions

Volatility

Wireshark

FTK

Jobbeschreibung

About the Role

Our client is seeking a skilled Remote Security Incident Response Specialist to join their globally distributed security team, with an emphasis on supporting operations within the East London, Eastern Cape region. This critical role involves detecting, analyzing, and responding to security incidents across the organization’s IT infrastructure. You will be instrumental in minimizing the impact of security breaches, conducting forensic investigations, and developing strategies to prevent future incidents. The ideal candidate possesses deep technical knowledge of incident response methodologies, strong analytical and problem-solving skills, and the ability to work effectively in a remote, fast-paced environment. This is a fully remote opportunity to make a significant contribution to safeguarding sensitive data and ensuring the operational resilience of the business.

Key Responsibilities

• Monitor security alerts and logs from various sources (SIEM, IDS/IPS, EDR) to detect potential incidents.
• Analyze security incidents to determine scope, impact, and root cause.
• Lead and execute incident response procedures, including containment, eradication, and recovery.
• Conduct digital forensics investigations to gather evidence and reconstruct event timelines.
• Develop and maintain incident response playbooks and documentation.
• Collaborate with other security teams (SOC, threat intelligence) and IT personnel during incident response efforts.
• Perform post-incident reviews and provide recommendations for improving security posture and response capabilities.
• Stay current with emerging threats, vulnerabilities, and incident response techniques.
• Communicate incident status and findings clearly and concisely to technical and management stakeholders.

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, or a related field, or equivalent practical experience.
• Minimum of 4-6 years of experience in security operations, incident response, or digital forensics.
• Strong understanding of incident response frameworks and methodologies (e.g., NIST Incident Response Lifecycle).
• Hands-on experience with SIEM tools, EDR solutions, and forensic analysis tools (e.g., Volatility, FTK, Wireshark).
• Knowledge of network protocols, operating systems (Windows, Linux), and common attack vectors.
• Excellent analytical, diagnostic, and problem-solving skills.
• Strong written and verbal communication skills, with the ability to document findings accurately.
• Ability to work independently, manage multiple priorities, and thrive in a remote environment.
• Relevant certifications such as GCIH, GCFA, CHFI, or CISSP are highly desirable.
• Experience supporting businesses in the Eastern Cape region or with similar operational demands is a plus.

Benefits

• Competitive salary and performance-based incentives.
• Comprehensive health, dental, and vision coverage.
• Generous paid time off and holidays.
• Excellent opportunities for continuous learning and professional development.
• Fully remote work arrangement providing exceptional flexibility.
• Dynamic and challenging role with significant impact on organizational security.
• Collaborative and supportive global team environment.
• Retirement savings plan.