Remote SOC Analyst II: Threat Detection & Response

Placements24; Stellenbosch; Hybrid; ZAR 420,000 - 660,000; Full time

Benefits offered by this job

Health insurance

Retirement plan

Certification support

Remote-first policy

Job summary

Placements24 is seeking a skilled Security Operations Center (SOC) Analyst Level 2 for a fully remote role in South Africa. You will monitor, analyze, and respond to security threats across our IT infrastructure within a remote-first organization.

You will handle incident response, develop detection rules, and collaborate with threat intelligence teams. A minimum of 3 years in a SOC and strong SIEM experience are required; certifications are a plus.

Qualifications

• Bachelor's degree or equivalent in CS or security.
• Minimum 3 years in a SOC or security operations.
• Hands-on with SIEMs and monitoring technologies.
• Solid networking knowledge (TCP/IP, firewalls).
• Familiar with incident response methodologies and TTPs.
• Certifications such as Security+, CySA+, or GIAC are a plus.

Responsibilities

• Monitor alerts from SIEM, IDS/IPS, and EDR.
• Analyze incidents to determine scope, impact, and root cause.
• Respond to incidents per procedures and escalate when needed.
• Investigate potential breaches and suspicious activity.
• Develop and refine SIEM detection rules and alerts.
• Maintain SOC playbooks and procedures.
• Collaborate with IR and threat intel teams.
• Conduct threat hunting and stay updated on threats.
• Contribute to SOC improvements.

Skills

SIEM monitoring

Threat hunting

Incident response

Analytical thinking

Communication skills

Remote work

Education

Bachelor's degree in Computer Science / Information Security

Tools

Splunk

QRadar

ELK Stack

EDR solutions

Firewalls

Job description

Placements24 is seeking a skilled Security Operations Center (SOC) Analyst Level 2 for a fully remote role in South Africa. You will monitor, analyze, and respond to security threats across our IT infrastructure within a remote-first organization.

You will handle incident response, develop detection rules, and collaborate with threat intelligence teams. A minimum of 3 years in a SOC and strong SIEM experience are required; certifications are a plus.