Remote Security Operations Center (SOC) Analyst

Placements24; Bloemfontein; Hybrid; ZAR 350,000 - 550,000; Full time

Benefits offered by this job

Home office stipend

Provident fund

Training & certification opportunities

Job summary

Placements24 is recruiting a Security Operations Center (SOC) Analyst for a fully remote role serving clients across South Africa. The position emphasizes real-time monitoring, detection, and response to cybersecurity threats using advanced tools.

You will work from anywhere in SA with support for remote operations. The ideal candidate holds a bachelor’s degree in cybersecurity/CS/IT or equivalent, with 1–3 years in SOC, and hands-on SIEM experience (Splunk/ArcSight/ELK).

Qualifications

• Bachelor's degree or equivalent practical experience in cybersecurity/CS/IT.
• 1–3 years in a SOC or security monitoring role.
• Hands-on with SIEM tools such as Splunk, ArcSight, ELK Stack.

Responsibilities

• Monitor security alerts and events from SIEM, IDS/IPS, firewalls, and endpoint protection.
• Analyze incidents, triage, and investigate malicious activity.
• Respond to alerts per procedures and escalate critical incidents as needed.
• Investigate threats with security tools and gather forensic evidence.
• Document all incidents, investigations, and responses thoroughly.
• Contribute to SOC playbooks and standard operating procedures.

Skills

SOC analyst

SIEM experience

Analytical thinking

Education

Bachelor's degree in Cybersecurity/CS/IT

Tools

Splunk

ArcSight

ELK Stack

Windows

Linux

Job description

About the Role

Our client, a leading provider of managed security services, is seeking a vigilant and skilled Security Operations Center (SOC) Analyst to join their fully remote team. This position is crucial for the real-time monitoring, detection, analysis, and response to cybersecurity threats across client environments. You will be on the front lines, utilizing advanced security tools and intelligence to protect against a constantly evolving threat landscape. The ideal candidate possesses strong analytical skills, a deep understanding of network protocols and security incidents, and the ability to work effectively under pressure. As a remote-first organization, we provide the tools, training, and support necessary for our analysts to succeed from anywhere in South Africa. This role offers an exciting opportunity to gain broad exposure to various security technologies and threats, contributing directly to the security posture of numerous organizations. We are committed to fostering a collaborative remote culture where continuous learning and professional growth are paramount in the field of cybersecurity operations.

Key Responsibilities

• Monitor security alerts and events from various sources, including SIEM, IDS/IPS, firewalls, and endpoint protection.
• Analyze security incidents, identify malicious activity, and perform initial triage and investigation.
• Respond to security alerts according to established procedures, escalating critical incidents as needed.
• Utilize security tools and technologies to investigate threats and gather forensic evidence.
• Document all security incidents, investigations, and response actions thoroughly.
• Contribute to the development and refinement of SOC playbooks and standard operating procedures.
• Stay informed about the latest cybersecurity threats, vulnerabilities, and attack vectors.
• Participate in threat hunting activities to proactively identify potential security compromises.
• Collaborate with other security teams to share threat intelligence and improve defensive measures.
• Perform regular health checks and tuning of SOC tools and systems.

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field, or equivalent practical experience.
• 1-3 years of experience working in a Security Operations Center (SOC) or a similar security monitoring role.
• Hands-on experience with SIEM tools (e.g., Splunk, ArcSight, ELK Stack).
• Understanding of TCP/IP networking, common protocols, and network security concepts.
• Familiarity with various operating systems (Windows, Linux) and their security configurations.
• Knowledge of common attack types (malware, phishing, DDoS, web application attacks).
• Ability to analyze logs and packet captures effectively.
• Strong analytical, problem-solving, and critical thinking skills.
• Excellent communication skills, both written and verbal, for effective reporting and collaboration.
• Must be able to work independently in a fully remote setting, ideally within **Bloemfontein, Free State, ZA**.

Benefits

• This fully remote role offers a competitive salary, comprehensive health and wellness benefits, a performance bonus, and contributions to a provident fund.
• Employees receive a stipend for home office setup and access to continuous training and certification opportunities.
• You will work with a dedicated and supportive team, gain invaluable experience in threat detection and response, and contribute to safeguarding critical digital assets for diverse clients.