Senior Security Operations Analyst - Durban

Placements24; Durban; On-site; ZAR 900,000 - 1,100,000; Full time

Benefits offered by this job

Competitive salary

Medical aid

Retirement fund

Training & certifications

Job summary

Placements24 is seeking a Senior Security Operations Analyst in Durban to monitor alerts, investigate incidents, and lead threat-hunting efforts. You will refine detection rules, perform malware analysis, and coordinate with stakeholders to contain and eradicate threats.

The role requires 5+ years in SOC, strong SIEM/EDR experience, and excellent communication. You will mentor junior analysts and help shape SOC playbooks within a global organization.

Qualifications

• Bachelor's degree or equivalent practical experience in security.
• 5+ years in SOC or incident response.
• Hands-on with SIEM (Splunk/QRadar), IDS/IPS, firewalls, and endpoint security.
• Strong log and network analysis and threat knowledge.

Responsibilities

• Monitor security alerts from SIEM, IDS/IPS, and EDR solutions.
• Investigate incidents, perform root cause analysis, and coordinate containment/eradication.
• Develop and refine monitoring rules and detection mechanisms.
• Respond to breaches and coordinate incident response with stakeholders.
• Conduct threat hunting to proactively identify threats.
• Analyze malware samples and attack techniques to improve defenses.
• Contribute to SOC playbooks and procedures.
• Collaborate with security teams to enhance overall posture.
• Mentor junior SOC analysts and document actions taken.

Skills

SIEM platforms

Incident response

Threat hunting

Malware analysis

Log analysis

Network traffic analysis

Forensic techniques

Analytical thinking

Communication skills

Team mentorship

Education

Bachelor's degree in Computer Science or Information Security

Tools

Splunk

QRadar

Firewall technologies

Endpoint security

Job description

About the Role

Our client, a global e-commerce giant, is seeking a highly motivated Senior Security Operations Analyst to join their dedicated security team in **Durban, KwaZulu-Natal, ZA**. This critical role involves monitoring security alerts, investigating potential threats, and responding to security incidents to protect the company's vast digital infrastructure. You will be at the forefront of defending against cyber-attacks, utilizing advanced security tools and analytical techniques. The ideal candidate possesses strong technical skills in threat detection, incident response, and a keen understanding of the evolving threat landscape. This is a fantastic opportunity to contribute to a major player in the digital economy from our **Durban** operations center.

Key Responsibilities

• Monitor and analyze security alerts from various sources, including SIEM, IDS/IPS, and endpoint detection systems.
• Investigate security incidents, perform root cause analysis, and implement appropriate containment and eradication measures.
• Develop and refine security monitoring rules and detection mechanisms.
• Respond to security breaches and coordinate incident response activities with relevant stakeholders.
• Conduct threat hunting activities to proactively identify and neutralize potential threats.
• Analyze malware samples and understand attack methodologies.
• Contribute to the development and improvement of Security Operations Center (SOC) playbooks and procedures.
• Collaborate with other security teams (e.g., incident response, vulnerability management) to enhance overall security posture.
• Mentor junior SOC analysts and provide technical guidance.
• Maintain accurate and detailed documentation of security events and actions taken.

Requirements

• A Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent practical experience.
• Minimum of 5 years of experience in a Security Operations Center (SOC) or similar incident response role.
• Hands‑on experience with SIEM platforms (e.g., Splunk, QRadar), IDS/IPS, firewalls, and endpoint security solutions.
• Proficiency in log analysis, network traffic analysis, and forensic techniques.
• Strong understanding of common attack vectors, malware types, and threat actor TTPs.
• Excellent analytical, problem‑solving, and critical thinking skills.
• Strong communication and collaboration skills.
• Ability to work effectively in a high‑pressure, 24/7 security operations environment.
• Relevant security certifications such as Security+, CEH, GIAC GCIH are a plus.
• Experience working in **Durban** or willingness to relocate is required.

Benefits

• Competitive salary and shift differential allowances.
• Comprehensive medical aid, dental, and vision insurance.
• Generous retirement fund contribution.
• Opportunities for advanced training, certifications, and career growth within a global organization.
• Access to cutting‑edge security tools and technologies.
• A challenging and rewarding work environment in **Durban**.
• Team‑building events and wellness programs.