Senior Information Security Operations Engineer (Remote)

Placements24; Vereeniging; Hybrid; ZAR 750,000 - 1,100,000; Full time

Benefits offered by this job

Remote work allowance

Flexible working hours

Training and certifications

Medical aid and retirement funds

Job summary

Placements24 is seeking a Senior Information Security Operations Engineer for a remote-first role. You will monitor security alerts from SIEMs, investigate incidents, and perform threat detection and remediation in a hands-on, distributed team.

The role requires 5+ years in information security operations, strong SIEM experience (Splunk/QRadar/LogRhythm), and scripting skills (Python/PowerShell). Remote work with flexible hours and ongoing development opportunities.

Qualifications

• Bachelor's degree in IT, cybersecurity, or related field.
• Minimum 5 years in information security operations or incident response.
• Hands-on with SIEM platforms (Splunk, QRadar, LogRhythm).
• Strong logs and network traffic analysis.
• EDR tools and IDS/IPS experience.
• Networking and OS knowledge (Windows, Linux).
• Scripting for automation (Python, PowerShell).
• Strong problem solving and remote-team communication.
• Certs such as CompTIA Security+, CEH, GIAC are a plus.

Responsibilities

• Monitor security alerts and events from SIEM, IDS/IPS, and firewalls.
• Investigate incidents, perform root cause analysis, and implement containment/remediation.
• Manage security infrastructure components for performance and availability.
• Develop and refine monitoring rules and detection logic.
• Conduct vulnerability scans and coordinate remediation with teams.
• Automate security tasks using scripting (Python, PowerShell).
• Contribute to playbooks and procedures for security operations.
• Participate in threat hunting to identify potential breaches.
• Collaborate with IT teams to ensure secure configurations.
• Stay updated on threats and defensive techniques.

Skills

Security operations

Incident response

Threat detection

Root cause analysis

Automation scripting

Education

Bachelor's degree in Information Technology/CYBERSECURITY

Tools

Splunk

QRadar

LogRhythm

EDR tools

IDS/IPS

Python

PowerShell

Windows

Linux

Job description

About the Role Our client is actively seeking a Senior Information Security Operations Engineer to join their dedicated cybersecurity team in a fully remote capacity. This role is crucial for maintaining and enhancing the security posture of the organization's IT infrastructure. The successful candidate will be responsible for monitoring security systems, responding to incidents, and implementing proactive security measures. This is a remote-first position, ideal for experienced professionals who are self-motivated and adept at collaborating virtually. We are looking for a hands‑on engineer with a strong understanding of security operations, threat detection, and incident response. You will play a key role in safeguarding our client's digital assets against a constantly evolving threat landscape. This is an excellent opportunity to contribute your expertise within a dynamic and supportive remote team environment.

Key Responsibilities

• Monitor security alerts and events from various security tools, including SIEM, IDS/IPS, and firewalls.
• Investigate security incidents, perform root cause analysis, and implement effective containment and remediation strategies.
• Manage and maintain security infrastructure components, ensuring optimal performance and availability.
• Develop and refine security monitoring rules and detection logic.
• Conduct vulnerability scans and work with relevant teams to prioritize and track remediation efforts.
• Automate security operational tasks using scripting languages (e.g., Python, PowerShell).
• Contribute to the development and improvement of security operational procedures and playbooks.
• Participate in threat hunting activities to proactively identify potential security breaches.
• Collaborate with other IT teams to ensure secure system configurations and deployments.
• Stay updated on the latest cybersecurity threats, vulnerabilities, and defensive techniques.

Requirements

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field.
• Minimum of 5 years of experience in information security operations, incident response, or security engineering.
• Hands‑on experience with SIEM platforms (e.g., Splunk, QRadar, LogRhythm).
• Proficiency in analyzing security logs and network traffic.
• Experience with endpoint detection and response (EDR) tools and network intrusion detection/prevention systems (IDS/IPS).
• Strong understanding of TCP/IP networking, common protocols, and operating systems (Windows, Linux).
• Scripting skills (e.g., Python, PowerShell) for automation of security tasks.
• Excellent problem‑solving and analytical skills.
• Ability to work independently, manage multiple priorities, and thrive in a remote work environment.
• Effective communication skills for remote team collaboration and reporting.
• Relevant certifications such as CompTIA Security+, CEH, or GIAC certifications are a plus.

Benefits

• Competitive salary and remote work allowance.
• Flexible working hours and a supportive remote work culture.
• Opportunity to work with a talented and distributed team.
• Professional development opportunities, including training and certifications.
• Contribution to medical aid and retirement funds.
• Access to modern security technologies and tools.
• Work‑life balance supported by a remote‑first approach.