Remote Security Operations Center (SOC) Analyst

Placements24; Pretoria; Hybrid; ZAR 350,000 - 600,000; Full time

Benefits offered by this job

Fully remote work arrangement

Medical insurance

Dental insurance

Professional development

Home office stipend

Pension contribution

Team virtual events

Job summary

Placements24 is seeking a skilled Remote SOC Analyst in South Africa to monitor security alerts, triage incidents, and coordinate responses for a fintech client.

You will work with SIEM/EDR tools (Splunk, QRadar, ELK), understand TCP/IP/DNS/HTTP(S), and operate in a Windows/Linux environment. Remote, SA-based eligibility and relevant certifications are assets.

Qualifications

• Bachelor's degree or equivalent practical experience.
• 1–3 years in a SOC or similar role.
• Familiar with SIEM tools (Splunk, QRadar, ELK).
• Understanding of TCP/IP, DNS, HTTP/S.
• Experience with Windows and Linux endpoints.
• Strong analytical and communication skills.
• Ability to work remotely and independently.
• Basic scripting knowledge (Python, PowerShell).
• Certifications like CompTIA Security+, CySA+, or GSEC are advantageous.
• Based in South Africa and eligible to work remotely.

Responsibilities

• Continuously monitor security alerts and events from SIEM/IDS/IPS/EDR tools.
• Analyze incidents, identify threats, and escalate per procedures.
• Triage alerts to determine scope and impact.
• Document incidents, actions, and resolutions.
• Assist in developing SOC playbooks and procedures.
• Stay informed about threats and vulnerabilities.
• Collaborate with security team to share threat intelligence.
• Participate in 24/7 shift rotations for coverage.
• Contribute to post-incident analyses and reporting.
• Maintain awareness of client systems and network architecture.

Skills

SOC operations

Incident analysis

Networking basics

Windows & Linux

Python scripting

PowerShell scripting

Remote work discipline

Communication

Education

Bachelor's degree or equivalent

Tools

Splunk

QRadar

ELK Stack

Job description

About the Role

Our client, a rapidly expanding fintech company, is actively seeking a vigilant and skilled Remote Security Operations Center (SOC) Analyst to bolster their cybersecurity defenses. This is a fully remote position, allowing you to work from anywhere within South Africa while contributing to the security of our client's cutting-edge digital platforms. You will be on the front lines, monitoring security alerts, detecting threats, and initiating response procedures to protect against cyber-attacks. The ideal candidate possesses a keen eye for detail, a strong understanding of network protocols and security tools, and a passion for cybersecurity. This remote-first role is perfect for proactive individuals seeking to make a significant impact in a fast-paced, innovative environment, contributing to the robust security posture of a leading fintech organization.

Key Responsibilities

• Continuously monitor security alerts and events from various security tools (SIEM, IDS/IPS, EDR).
• Analyze security incidents, identify potential threats, and expedite them according to established procedures.
• Perform initial investigation and triage of security alerts to determine scope and impact.
• Document security incidents, actions taken, and resolutions in the incident tracking system.
• Assist in the development and refinement of SOC playbooks and operational procedures.
• Stay informed about the latest cyber threats, vulnerabilities, and attack vectors.
• Collaborate with other security team members to share threat intelligence and enhance detection capabilities.
• Participate in shift rotations to ensure 24/7 security monitoring coverage.
• Contribute to post-incident analysis and reporting to identify areas for improvement.
• Maintain a high level of awareness regarding the client's systems and network architecture.

Requirements

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related discipline, or equivalent practical experience.
• 1-3 years of experience working in a Security Operations Center (SOC) environment or similar role.
• Familiarity with SIEM tools (e.g., Splunk, QRadar, ELK Stack) and security event analysis.
• Understanding of networking concepts (TCP/IP, DNS, HTTP/S) and common attack vectors.
• Knowledge of operating systems (Windows, Linux) and endpoint security solutions.
• Excellent analytical and problem-solving skills, with the ability to work under pressure.
• Strong written and verbal communication skills, suitable for remote collaboration.
• Ability to work independently and manage time effectively in a remote setting.
• Basic understanding of scripting languages (e.g., Python, PowerShell) is a plus.
• Relevant certifications such as CompTIA Security+, CySA+, or GSEC are advantageous.
• Must be based in and legally eligible to work remotely within South Africa.

Benefits

• Competitive annual salary ranging from R to R , depending on experience.
• Fully remote work arrangement, offering unparalleled flexibility and work-life balance.
• Comprehensive medical and dental insurance coverage.
• Generous allocation of paid time off and public holidays.
• Opportunities for continuous learning and professional development in cybersecurity.
• Access to a modern tech stack and collaborative remote team environment.
• Pension fund contribution.
• Home office equipment stipend.
• Performance incentives.
• Regular virtual team-building events.