Remote SOC Lead: Cybersecurity Analyst & Incident Commander

Placements24; Mtubatuba Local Municipality; Hybrid; ZAR 900,000 - 1,500,000; Full time

Benefits offered by this job

Health insurance

Performance bonuses

Training budget

Flexible hours

Fully remote work

Job summary

Placements24 is seeking an experienced Lead Cybersecurity Analyst to join a fully remote security operations center. You will guide a team of analysts, oversee threat detection, incident response, and security monitoring, and drive improvements in SOC processes and tools.

The ideal candidate has 7+ years in cybersecurity, including 3+ years in leadership, and hands-on expertise with Splunk, QRadar, and ArcSight, plus CISSP/GIAC/CISM certifications are desirable.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field.
• 7+ years cybersecurity experience, with 3+ years in a lead/SOC supervisory role.
• Proven threat detection, incident response and forensic analysis experience.

Responsibilities

• Lead and mentor a team of cybersecurity analysts in daily SOC operations.
• Oversee monitoring of security alerts and logs from various sources to detect threats.
• Coordinate incident response activities including investigation, containment, eradication, and recovery.
• Develop and refine threat detection rules and correlation logic within SIEM tools.
• Perform in-depth forensic analysis to determine root cause and impact.
• Stay current with latest cyber threats and attack vectors.
• Create incident response playbooks and documentation.
• Collaborate with security teams and IT to enhance security posture.

Skills

Team leadership

Threat detection

Incident response

Forensic analysis

Security monitoring

Education

Bachelor's degree in Cybersecurity

Tools

Splunk

QRadar

ArcSight

Job description

Placements24 is seeking an experienced Lead Cybersecurity Analyst to join a fully remote security operations center. You will guide a team of analysts, oversee threat detection, incident response, and security monitoring, and drive improvements in SOC processes and tools.

The ideal candidate has 7+ years in cybersecurity, including 3+ years in leadership, and hands-on expertise with Splunk, QRadar, and ArcSight, plus CISSP/GIAC/CISM certifications are desirable.