Senior Level 3 SOC Analyst - Onsite Cape Town MDR

Integrity360; Cape Town; On-site; ZAR 600,000 - 800,000; Full time

Job summary

Integrity360 in Cape Town is seeking a Level 3 SOC Analyst to join our MDR team onsite. You will act as the escalation point for complex investigations, guiding Level 2 analysts and coordinating containment and remediation efforts.

You will leverage SIEM/EDR/SOAR and related security technologies, perform threat hunting, develop detection content and playbooks, and communicate findings to customers and internal stakeholders. A strong security operations background and leadership are essential.

Qualifications

• Minimum 5 years in cyber security, including SOC/MDR/incident response.
• Proven experience handling complex security incidents and investigations.
• Mentor Level 1/2 analysts and promote best practices.
• Strong written and verbal communication skills.

Responsibilities

• Act as the Level 3 escalation point for advanced, complex or high-impact security investigations.
• Lead advanced incident investigations including containment and remediation.
• Analyze security events, logs, endpoint telemetry and network traffic.
• Develop detection use cases, correlation rules and playbooks.
• Prepare technical reports for customers and stakeholders.
• Mentor and develop Level 1 and 2 analysts.

Skills

SOC MDR experience

Threat hunting

Incident response

Investigation

Security monitoring

MITRE ATT&CK

Communication skills

Education

Security certifications (GCIH, GCFA, GCIA, GNFA, GCTI, GSEC, CISSP, CySA+, SC-200, AZ-500)

Tools

SIEM

EDR

SOAR

DLP

Microsoft Defender

Splunk

QRadar

CrowdStrike

Job description

Integrity360 in Cape Town is seeking a Level 3 SOC Analyst to join our MDR team onsite. You will act as the escalation point for complex investigations, guiding Level 2 analysts and coordinating containment and remediation efforts.

You will leverage SIEM/EDR/SOAR and related security technologies, perform threat hunting, develop detection content and playbooks, and communicate findings to customers and internal stakeholders. A strong security operations background and leadership are essential.