Remote Security Operations Center (SOC) Analyst - Bloemfontein

Placements24; Bloemfontein; Hybride; ZAR 360 000 - 560 000; Plein temps

Avantages offerts par ce poste

Fully remote

Flexible working hours

Learning & certification opportunities

Résumé du poste

Placements24 is seeking a dedicated SOC Analyst for a fully remote role, with flexibility to work from Bloemfontein or any remote location. You will monitor alerts, investigate incidents, and escalate as needed while contributing to ongoing SOC improvements and threat intelligence sharing.

The ideal candidate has 1-3 years in a SOC or similar security monitoring role, strong analytical skills, and familiarity with SIEM tools such as Splunk, QRadar, and ELK.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent practical experience.
• 1-3 years of experience in a Security Operations Center (SOC) environment or in a similar security monitoring role.
• Familiarity with SIEM tools (e.g., Splunk, QRadar, ELK Stack), IDS/IPS, firewalls, and EDR solutions.
• Understanding of common cyberattack vectors, malware, and threat actor tactics, techniques, and procedures (TTPs).
• Knowledge of networking protocols (TCP/IP, HTTP/S, DNS) and operating systems (Windows, Linux).
• Ability to analyze large datasets and identify patterns and anomalies.
• Strong analytical and problem-solving skills, with attention to detail.
• Excellent written and verbal communication skills, crucial for remote collaboration.
• Ability to work independently, manage time effectively, and maintain focus in a remote environment.
• Security certifications like CompTIA Security+, CySA+, or GIAC certifications are a plus.

Responsabilités

• Monitor security alerts from SIEM, IDS/IPS, firewalls, and endpoint protection systems.
• Analyze security events to identify potential threats, breaches, and malicious activities.
• Investigate security incidents, perform root cause analysis, and document findings.
• Respond to security incidents according to established procedures, including containment and eradication.
• Escalate critical incidents to senior analysts or incident response teams promptly.
• Develop and refine detection rules and use cases within the SIEM platform.
• Contribute to the continuous improvement of SOC processes, tools, and procedures.
• Maintain logs and documentation of all security activities.
• Collaborate with other security teams to share threat intelligence and improve security posture.
• Stay up-to-date with latest cybersecurity threats, vulnerabilities, and trends.

Connaissances

SOC experience

Analytical thinking

Remote work

Formation

Bachelor's degree in CS/IT/Cybersecurity

Outils

Splunk

QRadar

ELK Stack

EDR

Description du poste

About the Role

Our client, a global leader in cloud security solutions, is seeking a dedicated and alert Security Operations Center (SOC) Analyst to join their fully remote team. This role is critical in monitoring, detecting, and responding to cybersecurity threats across the organization's infrastructure. The successful candidate will analyze security alerts, investigate potential incidents, and escalat e issues as needed to ensure the protection of sensitive data and systems. This position is ideal for a proactive individual with a passion for cybersecurity and a proven ability to work independently and effectively in a remote setting. You will be a key part of a global SOC team, contributing to the security resilience of the company from Bloemfontein or any other remote location.

Key Responsibilities

• Monitor security alerts from various sources, including SIEM, IDS/IPS, firewalls, and endpoint protection systems.
• Analyze security events to identify potential threats, breaches, and malicious activities.
• Investigate security incidents, perform root cause analysis, and document findings.
• Respond to security incidents according to established procedures, including containment and eradication.
• Escalate critical incidents to senior analysts or incident response teams in a timely manner.
• Develop and refine detection rules and use cases within the SIEM platform.
• Contribute to the continuous improvement of SOC processes, tools, and procedures.
• Maintain accurate and detailed logs and documentation of all security activities.
• Collaborate with other security teams to share threat intelligence and improve overall security posture.
• Stay up-to-date with the latest cybersecurity threats, vulnerabilities, and trends.

Requirements

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent practical experience.
• 1-3 years of experience in a Security Operations Center (SOC) environment or in a similar security monitoring role.
• Familiarity with SIEM tools (e.g., Splunk, QRadar, ELK Stack), IDS/IPS, firewalls, and EDR solutions.
• Understanding of common cyberattack vectors, malware, and threat actor tactics, techniques, and procedures (TTPs).
• Knowledge of networking protocols (TCP/IP, HTTP/S, DNS) and operating systems (Windows, Linux).
• Ability to analyze large datasets and identify patterns and anomalies.
• Strong analytical and problem-solving skills, with attention to detail.
• Excellent written and verbal communication skills, crucial for remote collaboration.
• Ability to work independently, manage time effectively, and maintain focus in a remote environment.
• Security certifications like CompTIA Security+, CySA+, or GIAC certifications are a plus.

Benefits

This fully remote position offers a competitive salary, flexible working hours, opportunities for continuous learning and certification, and the chance to work with a highly skilled, globally distributed team. Our client is committed to providing a supportive remote work environment and investing in the professional growth of its employees. This role offers significant impact and career advancement within the cybersecurity field.