Senior Security Operations Center (SOC) Analyst

Placements24; Centurion; Hybrid; ZAR 700,000 - 1,100,000; Full time

Benefits offered by this job

Health and wellness benefits

Retirement savings plan

Performance-based bonuses

Professional development opportunities

Hybrid work model

Job summary

Placements24 is seeking a seasoned Senior SOC Analyst in Centurion, Gauteng, for a hybrid role. You will lead daily operations, monitor alerts from SIEM/EDR, and drive investigations to mitigate threats, while mentoring junior analysts and shaping incident response practices.

The ideal candidate has 5+ years in a SOC with at least 2 in a lead capacity and holds relevant cybersec certifications. The role emphasizes collaboration across IT and security teams with opportunities for advanced

Qualifications

• Bachelor's degree in Cybersecurity, CS, or related field.
• 5+ years in a SOC, with 2+ in senior/lead capacity.
• Experience with security monitoring tools (SIEM, IDS/IPS, EDR, SOAR).
• Strong understanding of networks, operating systems, and attack methodologies.
• Proficiency in threat intelligence analysis and forensic investigations.
• Scripting in Python is a plus.
• Certifications such as GSEC, GCIH, GCIA, or CISSP are desirable.
• Ability to work under pressure.

Responsibilities

• Lead daily SOC operations: monitoring, alert triage, incident investigation.
• Analyze security alerts from SIEM, IDS/IPS, EDR, and other sources.
• Conduct threat hunting and forensic analysis.
• Develop and refine detection rules and analytical models.
• Manage and respond to security incidents with timely resolution and documentation.
• Stay updated on threats, attack vectors, and mitigations.
• Mentor junior SOC analysts and provide guidance.
• Collaborate with security teams and IT to implement improvements.
• Contribute to SOC playbooks and procedures.
• Participate in tabletop exercises and IR drills.

Skills

Analytical thinking

Problem solving

Communication

Interpersonal skills

Leadership

Mentoring

Education

Bachelor's degree in Cybersecurity, or Computer Science

Tools

SIEM

IDS/IPS

EDR

SOAR

Python

Job description

About the Role

Our client, a leading financial institution, is seeking a seasoned Senior Security Operations Center (SOC) Analyst to join their advanced security team. This critical role, based in Centurion, Gauteng, ZA , involves leading the monitoring, detection, and response to cybersecurity threats across the organization's vast network and systems. You will be instrumental in analyzing security alerts, conducting in-depth investigations, and providing expert recommendations to mitigate risks. The ideal candidate possesses strong analytical skills, a deep understanding of threat intelligence, and proven experience in managing security incidents. This position offers a hybrid work arrangement, blending the benefits of in-office collaboration with remote flexibility. We are looking for a proactive and experienced professional to enhance our client's defensive security capabilities and contribute to maintaining a robust security posture in a dynamic threat landscape. Your expertise will be vital in protecting sensitive financial data and ensuring operational resilience.

Key Responsibilities

• Lead daily SOC operations, including monitoring, alert triage, and incident investigation.
• Analyze security alerts from various sources (SIEM, IDS/IPS, EDR, etc.).
• Conduct advanced threat hunting and forensic analysis.
• Develop and refine detection rules and analytical models.
• Manage and respond to security incidents, ensuring timely resolution and documentation.
• Stay updated on the latest cyber threats, attack vectors, and mitigation techniques.
• Mentor junior SOC analysts and provide technical guidance.
• Collaborate with other security teams and IT departments to implement security improvements.
• Contribute to the development and maintenance of SOC playbooks and procedures.
• Participate in tabletop exercises and incident response drills.

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, or a related field.
• Minimum of 5 years of experience in a SOC environment, with at least 2 years in a senior or lead capacity.
• Expertise in security monitoring tools (SIEM, IDS/IPS, EDR, SOAR).
• Strong understanding of networking protocols, operating systems, and common attack methodologies.
• Proficiency in threat intelligence analysis and forensic investigation techniques.
• Experience with scripting (e.g., Python) for automation is a plus.
• Excellent analytical, problem-solving, and critical thinking skills.
• Strong communication and interpersonal abilities.
• Relevant certifications such as GSEC, GCIH, GCIA, or CISSP are highly desirable.
• Ability to work effectively in a high-pressure environment.

Benefits

• Our client offers a competitive salary, comprehensive health and wellness benefits, a retirement savings plan, and performance-based bonuses.
• We provide excellent opportunities for professional development, including advanced training, conference attendance, and support for certifications.
• The hybrid work model ensures a good work-life balance.
• Join a leading financial institution in Centurion, Gauteng, ZA , and be at the forefront of protecting critical assets.