About the Role
Our client, a dynamic and growing telecommunications provider located in Polokwane, Limpopo , is seeking an experienced Security Operations Center (SOC) Manager. This role is responsible for leading and managing the daily operations of the SOC, ensuring the continuous monitoring, detection, analysis, and response to cybersecurity threats. You will lead a team of skilled SOC analysts, develop and refine SOC processes and playbooks, and collaborate with other security teams to enhance the organization's overall security posture. The ideal candidate has a strong background in security operations, incident response, and team leadership, coupled with a deep understanding of security technologies and threat landscapes.
Key Responsibilities
- Lead, manage, and mentor the Security Operations Center (SOC) team, fostering a high-performance culture.
- Oversee 24/7 security monitoring operations, ensuring timely detection and analysis of security events and alerts.
- Develop, implement, and continuously improve SOC processes, playbooks, and standard operating procedures (SOPs).
- Manage and optimize the effectiveness of SOC tools, including SIEM, IDS/IPS, EDR, and threat intelligence platforms.
- Lead and coordinate incident response activities, ensuring effective containment, eradication, and recovery from security incidents.
- Analyze threat intelligence to proactively identify potential risks and vulnerabilities.
- Establish and track key performance indicators (KPIs) and metrics for SOC operations.
- Collaborate with other IT and security teams to share information and enhance defensive capabilities.
- Develop and deliver training for SOC analysts to ensure their skills remain up-to-date.
- Report on SOC performance, incidents, and emerging threats to senior management.
Requirements
- Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field.
- Minimum of 5 years of experience in Security Operations (SecOps) or Incident Response, with at least 2 years in a team lead or management role.
- Proven experience managing a SOC team and overseeing security monitoring and incident response operations.
- In-depth knowledge of SIEM technologies, network security monitoring, endpoint detection and response (EDR), and threat intelligence concepts.
- Strong understanding of cybersecurity threats, attack vectors, and mitigation techniques.
- Experience with incident response frameworks and procedures.
- Excellent leadership, communication, analytical, and problem-solving skills.
- Ability to work under pressure and make critical decisions during security incidents.
- Relevant certifications such as GCIH, GCIA, CISSP, or Security+ are highly desirable.
Benefits
- Our client offers a competitive salary, a comprehensive benefits package including medical aid, pension fund, and performance bonuses.
- This hybrid role allows for a flexible work arrangement, blending office-based teamwork with remote work capabilities.
- You will have the opportunity to work with advanced security technologies, contribute to a critical function within a growing company, and develop your leadership skills.
- Benefits include generous leave, continuous training opportunities, and a collaborative work environment focused on protecting vital infrastructure.