Remote Security Operations Center (SOC) Analyst Level 2

Placements24; Stellenbosch; Hybrid; ZAR 420,000 - 660,000; Full time

Benefits offered by this job

Health insurance

Retirement plan

Certification support

Remote-first policy

Job summary

Placements24 is seeking a skilled Security Operations Center (SOC) Analyst Level 2 for a fully remote role in South Africa. You will monitor, analyze, and respond to security threats across our IT infrastructure within a remote-first organization.

You will handle incident response, develop detection rules, and collaborate with threat intelligence teams. A minimum of 3 years in a SOC and strong SIEM experience are required; certifications are a plus.

Qualifications

• Bachelor's degree or equivalent in CS or security.
• Minimum 3 years in a SOC or security operations.
• Hands-on with SIEMs and monitoring technologies.
• Solid networking knowledge (TCP/IP, firewalls).
• Familiar with incident response methodologies and TTPs.
• Certifications such as Security+, CySA+, or GIAC are a plus.

Responsibilities

• Monitor alerts from SIEM, IDS/IPS, and EDR.
• Analyze incidents to determine scope, impact, and root cause.
• Respond to incidents per procedures and escalate when needed.
• Investigate potential breaches and suspicious activity.
• Develop and refine SIEM detection rules and alerts.
• Maintain SOC playbooks and procedures.
• Collaborate with IR and threat intel teams.
• Conduct threat hunting and stay updated on threats.
• Contribute to SOC improvements.

Skills

SIEM monitoring

Threat hunting

Incident response

Analytical thinking

Communication skills

Remote work

Education

Bachelor's degree in Computer Science / Information Security

Tools

Splunk

QRadar

ELK Stack

EDR solutions

Firewalls

Job description

About the Role

Our client is seeking a highly skilled and vigilant Security Operations Center (SOC) Analyst Level 2 to join our fully remote security team. In this critical role, you will be responsible for monitoring, analyzing, and responding to security threats and incidents detected across our diverse IT infrastructure. As a remote-first organization, we embrace flexibility and collaboration, ensuring our team members can perform at their best from any location within South Africa. You will play a key part in maintaining the security and integrity of our systems, protecting sensitive data, and minimizing the impact of cyber threats. This is an exceptional opportunity to advance your career in cybersecurity within a supportive and forward-thinking remote work environment.

Key Responsibilities

• Monitor security alerts and events from various sources, including SIEM, IDS/IPS, EDR, and threat intelligence feeds.
• Analyze security incidents to determine their scope, impact, and root cause.
• Respond to and manage security incidents according to established procedures, escalating as necessary.
• Perform in-depth investigations of potential security breaches and suspicious activities.
• Develop and refine detection rules and alerts within the SIEM platform.
• Assist in the development and maintenance of SOC playbooks and procedures.
• Collaborate with incident response and threat intelligence teams to share information and coordinate actions.
• Conduct threat hunting activities to proactively identify potential security threats.
• Stay current with the latest cybersecurity threats, attack vectors, and mitigation techniques.
• Contribute to the continuous improvement of SOC operations and technologies.

Requirements

• Bachelor's degree in Computer Science, Information Security, Cybersecurity, or a related field; equivalent experience will be considered.
• Minimum of 3 years of experience in a SOC analyst role or similar cybersecurity operations position.
• Proven experience with SIEM tools (e.g., Splunk, QRadar, ELK Stack) and security monitoring technologies.
• Solid understanding of networking protocols, TCP/IP, firewalls, IDS/IPS, and endpoint security solutions.
• Experience with incident response methodologies and procedures.
• Knowledge of common attack vectors, malware types, and threat actor tactics, techniques, and procedures (TTPs).
• Excellent analytical, problem-solving, and critical thinking skills.
• Strong written and verbal communication skills.
• Ability to work independently and effectively in a remote team environment.
• Relevant certifications such as CompTIA Security+, CySA+, or GIAC certifications are a plus.

Benefits

This fully remote position offers a competitive salary, comprehensive health insurance, retirement savings plan, and opportunities for professional development, including paid training and certification assistance. Our client fosters a flexible and supportive work environment, allowing for excellent work-life balance. You will be joining a collaborative and dedicated cybersecurity team, working with cutting-edge tools and contributing to a secure digital landscape from the comfort of your chosen location.