Security Operations Engineer - Threat Detection & Response

Digital Outsource Services; Cape Town; On-site; ZAR 550,000 - 900,000; Full time

Benefits offered by this job

Employee Assistance Programme

Group Life Cover

Funeral Fund

Income Continuation Benefit

Medical Aid Subsidy

Retirement Annuity Subsidy

Job summary

Super Group in Cape Town seeks a Security Operations Analyst to strengthen monitoring, detection and incident response across on‑prem and cloud environments. You will triage alerts, investigate incidents, perform threat hunting, and collaborate with cross‑functional teams while maintaining ISO 27001/POPIA aligned documentation.

Proficiency with SIEM, EDR/ XDR and NGFWs, plus scripting in PowerShell or Python, is expected.

Qualifications

• Clear, confident communication skills, written and verbal.
• Collaborative mindset with ability to work across teams.
• Strong organisational skills and ability to manage multiple projects.
• Exceptional attention to detail and high‑quality work.
• Adaptability to fast‑moving environments.
• Solid grounding in security operations: attack detection, incident response, vulnerability management, and threat hunting.
• Hands‑on experience with SIEM, EDR/XDR and next‑generation firewalls (PaloAlto preferred).
• Strong working knowledge of Microsoft security (M365, Defender, EntraID).
• Understanding of networking principles (TCP/IP, OSI) and common attack techniques.
• Scripting ability in PowerShell, Python or Bash.
• Active Directory administration and enterprise identity management experience.

Responsibilities

• Monitor and triage security threats in real time, working the queue of alerts from SIEM, EDR/XDR, firewall, cloud and identity platforms.
• Conduct first‑line analysis of security events, escalating confirmed incidents to the appropriate teams.
• Investigate and respond to security incidents, documenting timelines, root causes and remediation actions.
• Proactively hunt for indicators of compromise and suspicious activity across the environment.
• Consume and apply threat intelligence to refine detection rules and stay ahead of emerging attack techniques.
• Run, interpret and triage vulnerability scans, prioritising remediation based on business risk.
• Tune detection rules, maintain security tooling and recommend improvements to accelerate monitoring and response.
• Manage security‑related service requests and operational tickets using Jira, ensuring timely triage, implementation, escalation and resolution.
• Maintain security documentation, SOPs and audit trails aligned to ISO 27001, POPIA and other regulatory obligations.
• Produce incident and metrics reports for stakeholders and support the external SOC partner and shift coverage.

Skills

SIEM

EDR/XDR

Next-gen firewalls

PowerShell

Python

Bash

Active Directory administration

Networking fundamentals

Threat hunting

Incident response

Vulnerability management

Education

Security operations fundamentals

Tools

Jira

Palo Alto

Microsoft 365 Defender

EntraID

Netskope / Purview

Job description

Super Group in Cape Town seeks a Security Operations Analyst to strengthen monitoring, detection and incident response across on‑prem and cloud environments. You will triage alerts, investigate incidents, perform threat hunting, and collaborate with cross‑functional teams while maintaining ISO 27001/POPIA aligned documentation.

Proficiency with SIEM, EDR/ XDR and NGFWs, plus scripting in PowerShell or Python, is expected.