Senior Information Security Analyst - SOC

Placements24; Johannesburg; Hybrid; ZAR 900,000 - 1,200,000; Full time

Benefits offered by this job

Medical, dental, vision insurance

Generous leave

Professional development

Hybrid work model

Job summary

Placements24 is seeking a Senior Information Security Analyst to join its Johannesburg-based Security Operations Center team. The role focuses on monitoring, detecting, analyzing, and responding to security incidents to protect critical assets and data.

The ideal candidate has 5+ years in SOC, strong SIEM experience, incident response and forensics skills, and a track record of collaborating with IT and legal teams in a fast-paced financial services environment.

Qualifications

• Bachelor's degree in Information Security, Computer Science, Cybersecurity, or related field; or equivalent practical experience.
• Minimum of 5 years in a SOC or similar information security role.
• Proven experience with SIEM tools (Splunk, QRadar, ArcSight), IDS/IPS, firewalls, EDR, and other security technologies.
• Strong understanding of networking, OS (Windows, Linux), and attack techniques (phishing, malware, ransomware, DDoS).
• Experience with incident response methodologies and digital forensics.
• Excellent analytical and problem-solving skills with high attention to detail.
• Strong communication and interpersonal skills; ability to report findings to stakeholders.
• Certifications such as CISSP, CEH, GCIH, or OSCP are highly desirable.
• Familiarity with cloud security concepts (AWS, Azure, GCP) is a plus.

Responsibilities

• Monitor security alerts from SIEM/IDS/IPS to identify incidents.
• Analyze security events to determine scope and impact.
• Develop and execute incident response plans (containment, eradication, recovery).
• Conduct forensic investigations to determine root causes of breaches.
• Stay updated on cyber threats affecting the financial sector.
• Collaborate with IT, legal, and management for effective remediation.
• Contribute to SOC playbooks and tool improvements.
• Mentor junior analysts and provide guidance.
• Support security awareness training initiatives.

Skills

SOC experience

SIEM proficiency

Incident response

Digital forensics

Networking knowledge

Analytical skills

Communication skills

Education

Bachelor's degree in Information Security/CS/Cybersecurity or equivalent

Certifications (CISSP, CEH, GCIH, OSCP) desirable

Tools

Splunk

QRadar

ArcSight

EDR

Firewalls

Job description

About the Role

Our client, a leading player in the financial services sector based in Johannesburg, Gauteng , is seeking a highly skilled and experienced Senior Information Security Analyst to join their dynamic Security Operations Center (SOC) team. This role is pivotal in safeguarding the organization's digital assets and critical infrastructure against evolving cyber threats. You will be instrumental in the day-to-day monitoring, detection, analysis, and response to security incidents. The ideal candidate possesses a deep understanding of security principles, advanced threat landscape knowledge, and a passion for protecting sensitive data. This is an exciting opportunity to contribute to a robust security posture within a challenging and rewarding environment.

Key Responsibilities

• Continuously monitor security alerts and logs from various sources, including SIEM, IDS/IPS, firewalls, and endpoint security solutions, to identify potential security incidents.
• Perform in-depth analysis of security events to determine the scope, severity, and impact of incidents.
• Develop and execute incident response plans, including containment, eradication, and recovery actions.
• Conduct forensic investigations to gather evidence and determine the root cause of security breaches.
• Stay abreast of the latest cyber threats, vulnerabilities, and attack vectors affecting the financial industry.
• Collaborate with cross-functional teams, including IT, legal, and management, to ensure effective incident handling and remediation.
• Contribute to the development and improvement of SOC procedures, playbooks, and security tools.
• Mentor junior security analysts and provide technical guidance.
• Participate in security awareness training initiatives.

Requirements

• Bachelor's degree in Information Security, Computer Science, Cybersecurity, or a related field, or equivalent practical experience.
• Minimum of 5 years of experience in a Security Operations Center (SOC) environment or similar information security role.
• Proven experience with SIEM tools (e.g., Splunk, QRadar, ArcSight), IDS/IPS, firewalls, EDR, and other security technologies.
• Strong understanding of networking protocols, operating systems (Windows, Linux), and common attack techniques (e.g., phishing, malware, ransomware, DDoS).
• Experience with incident response methodologies and digital forensics.
• Excellent analytical and problem-solving skills with a keen attention to detail.
• Strong communication and interpersonal skills, with the ability to effectively report findings and collaborate with stakeholders.
• Relevant certifications such as CISSP, CEH, GCIH, or OSCP are highly desirable.
• Familiarity with cloud security concepts (AWS, Azure, GCP) is a plus.

Benefits

• Competitive salary package commensurate with experience.
• Comprehensive medical, dental, and vision insurance.
• Generous annual leave and paid time off.
• Opportunities for professional development, training, and certifications.
• Access to cutting-edge security technologies and tools.
• A collaborative and supportive work environment in Johannesburg .
• Potential for career advancement within the organization.
• Hybrid work model offering flexibility between office and remote work.