About the Role
Our client is seeking a highly motivated and experienced Senior Information Security Analyst with a specialization in Security Information and Event Management (SIEM) to join their dynamic team. This role is critical in safeguarding our client's digital assets and ensuring the integrity, confidentiality, and availability of information systems. You will be instrumental in developing, implementing, and maintaining robust security monitoring capabilities, threat detection mechanisms, and incident response procedures. This is an exciting opportunity to make a significant impact in a growing organization located in Soweto, Gauteng, ZA . The position requires a blend of technical expertise, analytical skills, and a proactive approach to cybersecurity challenges. We are looking for an individual who thrives in a collaborative environment and is passionate about staying ahead of evolving cyber threats. The ideal candidate will possess a deep understanding of SIEM technologies and their application in detecting and responding to security incidents across complex IT infrastructures.
Key Responsibilities
- Design, implement, tune, and maintain SIEM solutions to ensure optimal performance and detection capabilities.
- Develop and manage correlation rules, alerts, dashboards, and reports within the SIEM platform to identify potential security threats and anomalies.
- Perform real-time monitoring of security events and analyze logs from various sources, including servers, network devices, and applications.
- Investigate security incidents, conduct forensic analysis, and coordinate response efforts to contain and remediate threats.
- Develop and document standard operating procedures (SOPs) for incident response, threat hunting, and SIEM management.
- Collaborate with IT operations, network engineering, and development teams to integrate security controls and improve overall security posture.
- Conduct regular vulnerability assessments and penetration testing to identify and address security weaknesses.
- Stay abreast of the latest cybersecurity threats, vulnerabilities, and industry best practices.
- Provide technical guidance and mentorship to junior security analysts.
Requirements
- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
- Minimum of 5 years of experience in information security, with at least 3 years focused on SIEM management and security operations (SecOps).
- Proven expertise with SIEM platforms such as Splunk, QRadar, ArcSight, or similar.
- Strong understanding of security frameworks (e.g., NIST, ISO 27001) and regulatory compliance requirements.
- Proficiency in log analysis, threat hunting, incident response, and digital forensics.
- Experience with scripting languages (e.g., Python, PowerShell) for automation is highly desirable.
- Relevant security certifications (e.g., CISSP, GSEC, SIEM-specific certs) are a strong plus.
- Excellent analytical and problem-solving skills with meticulous attention to detail.
- Strong communication and interpersonal skills, with the ability to explain complex technical issues to both technical and non-technical audiences.
Benefits
- Competitive salary package and performance-based bonuses.
- Comprehensive health, dental, and vision insurance.
- Generous paid time off and holiday schedule.
- Opportunities for professional development, training, and certifications.
- Retirement savings plan with employer matching.
- A collaborative and supportive work environment in Soweto, Gauteng, ZA .
- Access to cutting-edge security technologies and tools.
- Hybrid work model offering flexibility between office and remote work.