Remote Threat Intel & IR Cybersecurity Analyst

Placements24; Sandton; Hybrid; ZAR 600,000 - 900,000; Full time

Benefits offered by this job

Home office stipend

Professional development

Job summary

Placements24 is seeking a highly motivated Remote Cybersecurity Analyst to join the dedicated Security Operations Center (SOC) team. You will identify, analyze, and respond to cyber threats, focusing on threat intelligence gathering and proactive defense, from a fully remote setting.

The ideal candidate has 5+ years in cybersecurity, with expertise in SIEM (Splunk/QRadar/LogRhythm), IDS/IPS, and EDR, plus knowledge of TTPs and threat hunting.

Qualifications

• Minimum of 5 years in cybersecurity with focus on threat intelligence or incident response.
• Proficiency with SIEM tools (e.g., Splunk, QRadar, LogRhythm).
• Experience with IDS/IPS and EDR solutions.
• Strong understanding of cyberattack techniques, TTPs, and threat actor methodologies.
• Threat hunting and proactive security analysis experience.

Responsibilities

• Monitor security alerts and logs in real-time for a remote organization.
• Conduct in-depth analysis of security incidents to determine scope, cause and impact.
• Gather, analyze, and correlate threat intelligence from multiple sources.
• Develop and maintain threat intelligence reports and actionable insights.
• Participate in incident response activities including containment and recovery.
• Perform vulnerability assessments and penetration testing activities.
• Stay current with cybersecurity threats and technologies.
• Contribute to security policies, procedures, and playbooks.
• Collaborate with internal teams to implement security enhancements.
• Provide recommendations to improve overall security posture.
• Conduct security awareness training sessions as needed.

Skills

Threat intelligence

Incident response

SIEM tools

IDS/IPS

EDR

Threat hunting

Analytical thinking

Communication skills

Scripting (Python)

PowerShell

Tools

Splunk

QRadar

LogRhythm

Job description

Placements24 is seeking a highly motivated Remote Cybersecurity Analyst to join the dedicated Security Operations Center (SOC) team. You will identify, analyze, and respond to cyber threats, focusing on threat intelligence gathering and proactive defense, from a fully remote setting.

The ideal candidate has 5+ years in cybersecurity, with expertise in SIEM (Splunk/QRadar/LogRhythm), IDS/IPS, and EDR, plus knowledge of TTPs and threat hunting.