Security Analyst - SOC Tier 2

Placements24; East London; Hybrid; ZAR 420,000 - 660,000; Full time

Benefits offered by this job

Remote work

Health insurance

Retirement plan

Professional growth opportunities

Home office setup allowance

Generous leave

Job summary

Placements24 is seeking a skilled Security Analyst to join the Security Operations Center as a Tier 2 analyst. You will investigate alerts escalated from Tier 1, perform in‑depth analysis, and contribute to threat hunting within a fast-paced environment.

The role offers remote work flexibility and opportunities to collaborate with a dedicated cybersecurity team in East London, Eastern Cape. Ideal candidates have a Bachelor's degree in a related field, 3+ years in a SOC, and hands-on experience

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field; relevant experience may substitute.
• Minimum 3 years in a SOC environment or security analysis role.
• Strong understanding of networking protocols (TCP/IP, DNS, HTTP) and operating systems (Windows, Linux).
• Hands-on experience with SIEM platforms and EDR solutions.
• Experience with incident response methodologies and forensics concepts.

Responsibilities

• Analyze security alerts escalated from SOC Tier 1 and perform in-depth investigations.
• Identify, investigate, and respond to security incidents across the network and systems.
• Use SIEM, IDS/IPS, EDR and other tools to detect and analyze threats.
• Participate in threat hunting to identify malicious activity.
• Document findings and remediation actions clearly.
• Develop and refine detection rules and use cases for SIEM.

Skills

Analytical skills

Communication

Working under pressure

Education

Bachelor's degree in Cybersecurity/CS/IT

Tools

Splunk

QRadar

ELK Stack

EDR

Job description

Our client, a leading technology services firm, is seeking a skilled Security Analyst to join their Security Operations Center (SOC) as a Tier 2 analyst. This role is primarily responsible for investigating and responding to security alerts escalated from Tier 1 analysts, performing in-depth analysis of security events, and contributing to threat hunting activities. You will work with a variety of security tools, including SIEM, IDS/IPS, and endpoint detection systems, to identify and mitigate cyber threats. The ideal candidate possesses strong analytical skills, a solid understanding of cybersecurity principles, and the ability to work effectively in a fast-paced, often high-pressure environment. This position offers a fantastic opportunity for professional growth within a dedicated cybersecurity team, with the flexibility of remote work.

Key Responsibilities

• Analyze security alerts escalated from SOC Tier 1, performing in-depth investigations.
• Identify, investigate, and respond to security incidents across the organization's network and systems.
• Utilize SIEM, IDS/IPS, EDR, and other security tools to detect and analyze threats.
• Perform threat hunting to proactively identify malicious activity that may have bypassed existing controls.
• Document investigation findings, incident details, and remediation actions in a clear and concise manner.
• Develop and refine detection rules and use cases for the SIEM platform.
• Contribute to the creation and improvement of incident response playbooks and procedures.
• Collaborate with other IT teams and stakeholders to implement security controls and remediation steps.
• Stay up-to-date with the latest threat intelligence, vulnerabilities, and attack methodologies.
• Participate in on-call rotations as required.

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field; relevant experience may substitute.
• Minimum of 3 years of experience in a SOC environment (Tier 1 or Tier 2), incident response, or security analysis role.
• Strong understanding of networking protocols (TCP/IP, DNS, HTTP), operating systems (Windows, Linux), and common security threats.
• Hands-on experience with SIEM platforms (e.g., Splunk, QRadar, ELK Stack) and EDR solutions.
• Familiarity with incident response methodologies and digital forensics concepts.
• Excellent analytical and problem-solving skills with a keen attention to detail.
• Strong written and verbal communication skills, capable of clear documentation and reporting.
• Ability to work effectively under pressure and manage multiple priorities.
• Relevant certifications such as CompTIA Security+, CySA+, GSEC, or GCIA are highly desirable.
• Experience with scripting languages (e.g., Python, PowerShell) is a plus.

Benefits

• Competitive salary and remote work flexibility.
• Comprehensive health, dental, and vision insurance.
• Retirement savings plan options.
• Opportunities for professional growth, certifications, and advanced training.
• Work with a team of dedicated cybersecurity professionals in East London, Eastern Cape .
• Exposure to a wide range of security technologies and challenging security scenarios.
• Supportive and collaborative work culture.
• Generous annual leave and paid holidays.
• Home office setup allowance.
• Regular virtual team meetings and knowledge-sharing sessions.