Senior Information Security Analyst - Threat Detection

Placements24; Johannesburg; Hybrid; ZAR 900.000 - 1.500.000; Vollzeit

Benefits dieser Stelle

Comprehensive health insurance

Paid time off

Professional development

Hybrid work model

Retirement savings plan

Employee assistance program

Zusammenfassung

Placements24 in Johannesburg is seeking a Senior Information Security Analyst to join a vibrant SOC. You will monitor, detect, and respond to security incidents, safeguarding data with advanced threat detection and incident response expertise.

The role emphasizes collaboration with IT and business units, ongoing security improvements, and staying ahead of evolving cyber threats within a hybrid work setup in Johannesburg.

Qualifikationen

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Minimum of 5 years of experience in information security, with a focus on threat detection and incident response.
• Strong understanding of networking protocols, operating systems (Windows and Linux), and common attack vectors.
• Proficiency with SIEM tools (e.g., Splunk, QRadar, ArcSight) and EDR solutions.
• Experience with security frameworks such as NIST, ISO 27001, or SOC 2.
• Certifications such as CISSP, GCIH, CEH, or CISM are highly desirable.
• Experience with scripting languages (Python, PowerShell) for automation is a plus.

Aufgaben

• Develop and implement advanced threat detection strategies and methodologies.
• Monitor security alerts and logs from SIEM, IDS/IPS, and EDR tools.
• Analyze security incidents to determine root cause, impact, and remediation steps.
• Investigate and respond to security breaches and cyber-attacks promptly.
• Create detailed incident reports and recommendations for security posture improvements.
• Stay updated on cyber threats, vulnerabilities, and best practices.
• Collaborate with IT and business units to ensure security policies are understood.
• Participate in security awareness training and documentation.
• Contribute to improving security tools and technologies used by the SOC.

Kenntnisse

Threat detection

Incident response

Networking basics

Analytical thinking

Ausbildung

Bachelor's degree in CS/IT/Cybersecurity or related field

Tools

Splunk

QRadar

ArcSight

EDR solutions

Python

PowerShell

Jobbeschreibung

Our client, a leading technology firm based in the vibrant city of Johannesburg, Gauteng , is seeking a highly skilled and motivated Senior Information Security Analyst to join their dynamic security operations center. This role is crucial in safeguarding the organization's digital assets against evolving cyber threats. You will be part of a dedicated team responsible for monitoring, detecting, and responding to security incidents, ensuring the integrity and confidentiality of sensitive data. The ideal candidate possesses a deep understanding of security principles, incident response frameworks, and advanced threat analysis techniques. This position offers a fantastic opportunity to grow your career in information security within a challenging and rewarding environment. We are committed to fostering a collaborative culture where innovation and continuous learning are highly valued. This hybrid role allows for a balance between in-office collaboration and remote flexibility, ensuring a productive work environment.

Key Responsibilities

• Develop and implement advanced threat detection strategies and methodologies.
• Monitor security alerts and logs from various sources, including SIEM, IDS/IPS, and endpoint detection tools.
• Conduct in-depth analysis of security incidents to determine root cause, impact, and remediation steps.
• Investigate and respond to security breaches and cyber-attacks in a timely and effective manner.
• Create detailed incident reports and provide recommendations for security posture improvement.
• Stay abreast of the latest cybersecurity threats, vulnerabilities, and industry best practices.
• Collaborate with IT and business units to ensure security policies and procedures are understood and followed.
• Participate in security awareness training and contribute to the development of security documentation.
• Contribute to the ongoing improvement of security tools and technologies used by the SOC.

Requirements

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Minimum of 5 years of experience in information security, with a focus on threat detection and incident response.
• Strong understanding of networking protocols, operating systems (Windows and Linux), and common attack vectors.
• Proficiency with SIEM tools (e.g., Splunk, QRadar, ArcSight) and EDR solutions.
• Experience with security frameworks such as NIST, ISO 27001, or SOC 2.
• Excellent analytical and problem-solving skills, with the ability to think critically under pressure.
• Strong communication and interpersonal skills, with the ability to explain complex technical issues to non-technical stakeholders.
• Relevant security certifications such as CISSP, GCIH, CEH, or CISM are highly desirable.
• Experience with scripting languages (e.g., Python, PowerShell) for automation is a plus.

Benefits

• Competitive annual salary package.
• Comprehensive health, dental, and vision insurance.
• Generous paid time off and holiday schedule.
• Opportunities for professional development and certifications.
• A collaborative and supportive work environment in Johannesburg .
• Access to cutting-edge security technologies.
• Hybrid work model offering flexibility.
• Retirement savings plan with company matching.
• Employee assistance program.