Security Operations Center (SOC) Analyst - Tier 2

Placements24; Mtubatuba Local Municipality; Hybrid; ZAR 420,000 - 660,000; Full time

Benefits offered by this job

Health, dental and vision coverage

Generous leave and vacation

Professional certifications/Training

Hybrid work model

Job summary

Placements24 is seeking a vigilant Security Operations Center (SOC) Analyst (Tier 2) in Richards Bay, KwaZulu-Natal. The role focuses on monitoring alerts, investigating incidents, and leading response efforts to mitigate threats, with a hybrid work arrangement and opportunities for advanced certifications.

The ideal candidate has 3+ years in a SOC or similar role, strong networking knowledge, and hands-on experience with SIEMs and EDR tools.

Qualifications

• Bachelor's degree or equivalent work experience in a related field.
• Minimum of 3 years in a SOC Analyst role or similar.
• Strong understanding of networking concepts and protocols.
• Experience with SIEM platforms, EDR, and security monitoring tools.
• Familiarity with incident response frameworks and best practices.

Responsibilities

• Monitor security alerts and events from SIEM, IDS/IPS, EDR, and firewalls.
• Investigate and analyze security incidents to determine scope, impact, and root cause.
• Analyze suspicious activities, malware, and potential breaches.
• Lead and coordinate incident response activities (containment, eradication, recovery).
• Develop and maintain incident response playbooks and procedures.
• Triage and escalate complex incidents to appropriate teams or management.
• Conduct threat hunting to identify emerging threats.
• Contribute to SOC tools and process improvements.
• Document incident details, actions, and lessons learned.

Skills

Networking concepts

TCP/IP

Analytical skills

Problem solving

Communication skills

Collaboration

Shift work

Education

Bachelor's degree in cybersecurity or related field

Tools

SIEM (Splunk/QRadar)

EDR solutions

Incident response tools

Job description

About the Role

Our client is seeking a vigilant and skilled Security Operations Center (SOC) Analyst (Tier 2) to join their growing security team in Richards Bay, KwaZulu-Natal, ZA . In this critical role, you will be responsible for monitoring security alerts, investigating potential security incidents, and leading the response efforts to effectively mitigate threats. You will work with advanced security tools and technologies to protect our client's information assets. This position requires a deep understanding of cybersecurity threats, incident response procedures, and a proactive approach to safeguarding the organization's digital environment. The ideal candidate will possess strong analytical skills and the ability to work effectively under pressure.

Key Responsibilities

• Monitor security alerts and events from various sources, including SIEM, IDS/IPS, EDR, and firewalls.
• Investigate and analyze security incidents to determine scope, impact, and root cause.
• Perform in-depth analysis of suspicious activities, malware, and potential breaches.
• Lead and coordinate incident response activities, including containment, eradication, and recovery.
• Develop and maintain incident response playbooks and procedures.
• Triage and elevate complex security incidents to appropriate teams or management.
• Conduct threat hunting activities to proactively identify emerging threats.
• Contribute to the continuous improvement of SOC tools and processes.
• Document incident details, actions taken, and lessons learned.
• Stay current with the latest cybersecurity threats, vulnerabilities, and mitigation techniques.

Requirements

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent work experience.
• Minimum of 3 years of experience in a SOC Analyst role or similar security operations position.
• Strong understanding of networking concepts, TCP/IP, and common network protocols.
• Experience with SIEM platforms (e.g., Splunk, QRadar), EDR solutions, and other security monitoring tools.
• Knowledge of common attack vectors, malware types, and threat actor TTPs.
• Familiarity with incident response frameworks and best practices.
• Excellent analytical and problem-solving skills.
• Strong communication and collaboration abilities.
• Ability to work shifts and be part of an on-call rotation.
• Relevant security certifications (e.g., CompTIA Security+, CySA+, GCIH) are a plus.

Benefits

• Competitive salary and performance incentives.
• Comprehensive health, dental, and vision coverage.
• Generous vacation and holiday leave.
• Opportunities for advanced training and professional certifications.
• Retirement savings plan.
• A dynamic work environment in Richards Bay, KwaZulu-Natal, ZA .
• Exposure to cutting-edge security technologies.
• Hybrid work model offering flexibility.