Senior Incident Response Lead - Remote SIEM Expert

Placements24; Paarl; Hybrid; ZAR 600,000 - 1,200,000; Full time

Benefits offered by this job

Fully remote position

Continuous training and development

Job summary

Placements24 partners with a global data security leader to recruit a Senior Incident Response Analyst for a fully remote Security Operations Center. You will lead investigations, oversee remediation across global infrastructure, and drive containment and recovery during major security incidents.

You will perform forensic analysis, develop incident playbooks, mentor junior analysts, and coordinate with IT, legal, and communications.

Qualifications

• 6+ years of incident response, digital forensics, or security operations.
• Experience handling malware, ransomware, data breaches, and APTs.
• Strong forensic analysis skills and familiarity with network protocols, Windows and Linux.
• Proficiency with SIEM/EDR platforms and incident reporting.

Responsibilities

• Lead end-to-end response to security incidents: detect, analyze, contain, eradicate and recover.
• Perform in-depth forensic analysis of compromised systems and networks.
• Develop containment strategies to prevent threat spread.
• Conduct root cause analysis and provide remediation recommendations.
• Create detailed incident reports for technical teams and executives.
• Develop and maintain incident response playbooks and procedures.
• Monitor alerts using SIEM/EDR and other tools; collaborate with IT, legal and communications.
• Mentor junior analysts and contribute to lessons learned.

Skills

Analytical thinking

Problem solving

Communication

Documentation

Working under pressure

Education

Bachelor's degree in Computer Science, Cybersecurity, Forensics, or related field

Tools

EnCase

FTK

Volatility

SIEM

EDR

Job description

Placements24 partners with a global data security leader to recruit a Senior Incident Response Analyst for a fully remote Security Operations Center. You will lead investigations, oversee remediation across global infrastructure, and drive containment and recovery during major security incidents.

You will perform forensic analysis, develop incident playbooks, mentor junior analysts, and coordinate with IT, legal, and communications.