Remote SOC Lead: Threat Hunting & Incident Response

Placements24; LegKraal Gate; Hybrid; ZAR 1,200,000 - 1,800,000; Full time

Benefits offered by this job

Fully remote role in South Africa

Competitive salary and benefits

Professional growth: trainings andcert

Conference attendance opportunities

Job summary

Placements24 is seeking an experienced Lead SOC Analyst to head a fully remote SOC across South Africa. You will supervise SOC analysts, drive incident response, and refine playbooks and SOPs to strengthen defenses.

You will guide threat hunting, manage SIEM and monitoring tools, and report security posture to management. A strong background in MITRE ATT&CK, CISSP/CISM/GIAC is desirable, along with leadership and remote team management skills.

Qualifications

• Minimum of 7 years in cybersecurity operations, with at least 3 years in a lead or supervisory role.
• Extensive experience with SIEM platforms, IDS/IPS, EDR, firewalls, and other security monitoring tools.
• Strong understanding of incident response methodologies, threat intelligence, and MITRE ATT&CK.
• Proficiency in analyzing security logs, network traffic, and system artifacts.
• Excellent leadership, communication, and problem-solving skills.
• Ability to manage and motivate a remote team effectively.
• Relevant certifications such as CISSP, CISM, GIAC are highly desirable.
• Experience with scripting (Python) for automation is a plus.

Responsibilities

• Lead and manage a team of SOC Analysts, providing guidance and mentorship.
• Oversee the real-time monitoring of security alerts, events, and logs from various security tools.
• Analyze security incidents, determine their scope and impact, and coordinate response activities.
• Develop, refine, and execute SOC playbooks and standard operating procedures (SOPs).
• Manage and tune Security Information and Event Management (SIEM) systems and other SOC tools.
• Conduct threat hunting activities to proactively identify potential security breaches.
• Stay current with the latest threat intelligence, attack vectors, and cybersecurity trends.
• Report on SOC performance metrics, incident trends, and security posture to management.
• Ensure compliance with security policies and regulatory requirements.
• Facilitate post-incident reviews and implement lessons learned to improve defenses.
• Collaborate with other security teams, including incident response and vulnerability management.

Skills

Team leadership

SOC operations

SIEM expertise

Incident response

Threat intelligence

Python scripting

Education

Bachelor's degree in Cybersecurity/Computer Science/IT

Tools

SIEM platforms

IDS/IPS

EDR

Firewalls

Job description

Placements24 is seeking an experienced Lead SOC Analyst to head a fully remote SOC across South Africa. You will supervise SOC analysts, drive incident response, and refine playbooks and SOPs to strengthen defenses.

You will guide threat hunting, manage SIEM and monitoring tools, and report security posture to management. A strong background in MITRE ATT&CK, CISSP/CISM/GIAC is desirable, along with leadership and remote team management skills.