Senior Information Security Analyst - SIEM Specialist

Placements24; Johannesburg; Híbrido; ZAR 900 000 - 1 800 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Competitive salary package

Comprehensive health insurance

Retirement fund contributions

Professional development opportunities

Hybrid work arrangement

Access to advanced security tools

Resumo da oferta

Placements24 is seeking a Senior Information Security Analyst specializing in SIEM to join a dynamic cybersecurity team in Johannesburg, Gauteng. The role focuses on monitoring, detecting, and responding to threats, with a mix of in-office collaboration and remote flexibility.

You will develop SIEM rules, correlate alerts, and lead incident response efforts while mentoring junior analysts and staying ahead of evolving threats. Strong communication is essential for cross-team coordination.

Qualificações

• Bachelor's degree in Information Security, Computer Science, or related field, or equivalent practical experience.
• Minimum of 5 years in information security with a strong focus on SIEM technologies (Splunk/QRadar/ArcSight).
• Ability to develop and tune SIEM rules, alerts, and dashboards.
• Strong understanding of network protocols, Windows and Linux.
• Experience with incident response methodologies and tools.
• Excellent analytical and communication skills.

Responsabilidades

• Develop, configure, and maintain SIEM platforms to ingest and analyze security logs from various sources.
• Design and implement correlation rules, alerts, and dashboards for detection and reporting of incidents.
• Conduct in-depth analysis of security events and incidents and recommend remediation steps.
• Participate in incident response activities including containment and recovery.
• Collaborate with IT operations and development teams to embed security into designs and deployments.
• Stay current with threat intelligence and attack vectors relevant to the organization.
• Create reports on incidents, trends, and security control effectiveness for management.
• Mentor junior analysts and contribute to security monitoring improvements.

Conhecimentos

SIEM expertise

Splunk

QRadar

ArcSight

Incident response

Network security

Linux/Windows

Effective communication

Formação académica

Bachelor's in Information Security/CS

Ferramentas

Splunk

QRadar

ArcSight

Descrição da oferta de emprego

About the Role

Our client, a prominent player in the cybersecurity landscape, is seeking a highly skilled and experienced Senior Information Security Analyst with a specialization in SIEM (Security Information and Event Management) technologies. This pivotal role will be based in the dynamic city of Johannesburg, Gauteng . The successful candidate will be instrumental in enhancing our client's security posture by proactively monitoring, detecting, and responding to a wide range of security threats and incidents. This is an exciting opportunity to join a forward-thinking team that is dedicated to safeguarding critical information assets and ensuring the integrity of complex IT environments. The role demands a proactive and analytical mindset, with a strong emphasis on leveraging cutting-edge SIEM tools to identify sophisticated threats. This position offers a blend of in-office collaboration and remote flexibility, making it ideal for professionals seeking a balanced work environment in Johannesburg .

Key Responsibilities

• Develop, configure, and maintain SIEM platforms to ingest and analyze security logs from various sources.
• Design and implement correlation rules, alerts, and dashboards to effectively detect and report on security incidents.
• Conduct in-depth analysis of security events and incidents, performing root cause analysis and recommending remediation steps.
• Participate in incident response activities, including containment, eradication, and recovery.
• Collaborate with IT operations and development teams to ensure security best practices are integrated into system designs and deployments.
• Stay abreast of the latest threat intelligence, vulnerabilities, and attack vectors relevant to the organization.
• Create comprehensive reports on security incidents, trends, and the overall effectiveness of security controls for management.
• Mentor junior security analysts and contribute to the continuous improvement of security monitoring capabilities.

Requirements

• Bachelor's degree in Information Security, Computer Science, or a related field, or equivalent practical experience.
• Minimum of 5 years of experience in information security, with a significant focus on SIEM technologies (e.g., Splunk, QRadar, ArcSight).
• Proven ability to develop and tune SIEM rules, alerts, and dashboards.
• Strong understanding of network protocols, operating systems (Windows and Linux), and common attack methodologies.
• Experience with incident response methodologies and tools.
• Excellent analytical, problem-solving, and critical-thinking skills.
• Strong communication and interpersonal skills, with the ability to explain complex technical issues to both technical and non-technical audiences.
• Relevant security certifications (e.g., CISSP, GIAC) are a plus.

Benefits

• competitive salary package
• comprehensive health insurance
• retirement fund contributions
• opportunities for professional development and certifications
• You will work in a stimulating environment in Johannesburg with a team of dedicated professionals.
• The company culture promotes continuous learning and encourages employees to expand their expertise.
• This role also provides a flexible working arrangement, combining the benefits of office-based collaboration with the convenience of remote work.
• Access to advanced security tools and technologies is guaranteed, ensuring you are always at the forefront of cybersecurity.