Remote Security Operations Center (SOC) Analyst Level 2

Placements24; South Africa; Remote; ZAR 420,000 - 780,000; Full time

Benefits offered by this job

Health insurance

Retirement plan

Professional development

Certification support

Remote-friendly

Work-life balance

Job summary

Placements24 is seeking a highly skilled SOC Analyst Level 2 to join our fully remote security team in South Africa. You will monitor, analyze, and respond to security threats across our IT infrastructure, ensuring rapid containment and remediation while working from home.

You will collaborate with threat intel and incident response teams, develop detection rules, refine playbooks, and stay current with cyber threats. A strong background in SIEM, networking, and incident response is required.

Qualifications

• Bachelor's degree in Computer Science, Information Security or related field, or equivalent experience.
• 3+ years in a SOC or similar cybersecurity operations role.
• Proven experience with SIEM tools (Splunk, QRadar, ELK) and monitoring technologies.

Responsibilities

• Monitor security alerts from SIEM, IDS/IPS, EDR, and threat intel feeds.
• Analyze incidents to determine scope, impact, and root cause.
• Respond to incidents per established procedures; escalate as needed.
• Conduct in-depth investigations of potential breaches and suspicious activity.
• Develop and refine detection rules and alerts in SIEM.
• Assist in SOC playbooks and procedures.

Skills

Analytical thinking

Problem solving

Critical thinking

Communication skills

Remote work

Independent work

Education

Bachelor's degree in CS/Info Security

Tools

Splunk

QRadar

ELK Stack

EDR

Job description

About the Role

Our client is seeking a highly skilled and vigilant Security Operations Center (SOC) Analyst Level 2 to join our fully remote security team. In this critical role, you will be responsible for monitoring, analyzing, and responding to security threats and incidents detected across our diverse IT infrastructure. As a remote-first organization, we embrace flexibility and collaboration, ensuring our team members can perform at their best from any location within South Africa. You will play a key part in maintaining the security and integrity of our systems, protecting sensitive data, and minimizing the impact of cyber threats. This is an exceptional opportunity to advance your career in cybersecurity within a supportive and forward-thinking remote work environment.

Key Responsibilities

• Monitor security alerts and events from various sources, including SIEM, IDS/IPS, EDR, and threat intelligence feeds.
• Analyze security incidents to determine their scope, impact, and root cause.
• Respond to and manage security incidents according to established procedures, escalating as necessary.
• Perform in-depth investigations of potential security breaches and suspicious activities.
• Develop and refine detection rules and alerts within the SIEM platform.
• Assist in the development and maintenance of SOC playbooks and procedures.
• Collaborate with incident response and threat intelligence teams to share information and coordinate actions.
• Conduct threat hunting activities to proactively identify potential security threats.
• Stay current with the latest cybersecurity threats, attack vectors, and mitigation techniques.
• Contribute to the continuous improvement of SOC operations and technologies.

Requirements

• Bachelor's degree in Computer Science, Information Security, Cybersecurity, or a related field; equivalent experience will be considered.
• Minimum of 3 years of experience in a SOC analyst role or similar cybersecurity operations position.
• Proven experience with SIEM tools (e.g., Splunk, QRadar, ELK Stack) and security monitoring technologies.
• Solid understanding of networking protocols, TCP/IP, firewalls, IDS/IPS, and endpoint security solutions.
• Experience with incident response methodologies and procedures.
• Knowledge of common attack vectors, malware types, and threat actor tactics, techniques, and procedures (TTPs).
• Excellent analytical, problem-solving, and critical thinking skills.
• Strong written and verbal communication skills.
• Ability to work independently and effectively in a remote team environment.
• Relevant certifications such as CompTIA Security+, CySA+, or GIAC certifications are a plus.

Benefits

This fully remote position offers a competitive salary, comprehensive health insurance, retirement savings plan, and opportunities for professional development, including paid training and certification assistance. Our client fosters a flexible and supportive work environment, allowing for excellent work-life balance. You will be joining a collaborative and dedicated cybersecurity team, working with cutting-edge tools and contributing to a secure digital landscape from the comfort of your chosen location.