Security Operations Analyst: Real-Time Threat Hunter

DigiOutsource; Cape Town; On-site; ZAR 480,000 - 720,000; Full time

Benefits offered by this job

Learning & development programs

Performance management tools

Employee Assistance Programme

Group Life Cover

Death & Funeral Benefit

Income Continuation Benefit

Medical Aid Subsidy

Retirement Annuity Subsidy

Job summary

Super Group International is seeking a Security Operations Analyst to monitor and triage threats, investigate incidents, and hunt for indicators of compromise across SIEM, EDR/XDR, and cloud environments.

You will work with Palo Alto firewalls and Microsoft security tools, aligning with ISO, POPIA and other regulatory requirements while supporting ongoing improvement and security hygiene.

Qualifications

• Experience in security operations, incident response and threat hunting.
• Strong knowledge of SIEM/EDR/XDR, and firewall security.
• Familiarity with Microsoft 365 security stack and Entra ID/Conditional Access.

Responsibilities

• Monitor and triage security threats in real time; differentiate real threats from noise.
• Investigate and respond to security incidents end to end; document timelines and remediation.
• Hunt for indicators of compromise; apply threat intelligence to improve detections.
• Manage and track vulnerabilities; prioritize fixes based on risk.

Skills

Security operations

Incident response

Threat hunting

Vulnerability management

SIEM

EDR/XDR

Firewall security

Microsoft security

Networking basics

PowerShell

Python

Bash

Active Directory

Collaboration

Education

Bachelor's degree in a relevant field

Tools

SIEM tools

EDR/XDR tooling

Palo Alto firewalls

Microsoft Defender

Entra ID

Intune security policies

Defender for Cloud Apps

Netskope / Purview

Job description

Super Group International is seeking a Security Operations Analyst to monitor and triage threats, investigate incidents, and hunt for indicators of compromise across SIEM, EDR/XDR, and cloud environments.

You will work with Palo Alto firewalls and Microsoft security tools, aligning with ISO, POPIA and other regulatory requirements while supporting ongoing improvement and security hygiene.