Senior Security Operations Center (SOC) Analyst

Placements24; Durban; On-site; ZAR 700,000 - 900,000; Full time

Job summary

Placements24 is seeking a Senior SOC Analyst to join our client in Durban, KwaZulu-Natal. The role focuses on monitoring, detecting, analyzing, and responding to cybersecurity threats across a large-scale operation.

The ideal candidate has at least four years in an SOC, strong SIEM/EDR experience, and solid networking knowledge. Relevant certifications are highly desirable, and willingness to work shifts is a plus.

Qualifications

• Bachelor's degree in cybersecurity, IT, CS or related field.
• Minimum 4 years' SOC experience.
• Experience with SIEM platforms and EDR.
• Networking knowledge including TCP/IP.
• Incident response and forensic analysis experience.
• Windows and Linux security knowledge.
• Desirable certifications: Security+, CEH, GIAC GCIH.

Responsibilities

• Monitor security alerts and events from SIEM/IDS/IPS/EDR in real-time.
• Analyze security incidents to determine scope, impact and root cause.
• Respond to incidents per established procedures (containment, eradication, recovery).
• Conduct threat hunting to identify and mitigate risks.
• Develop and refine detection rules, correlation logic, and alerts in the SIEM.
• Stay updated on threats, vulnerabilities and attack techniques.
• Create and maintain SOC procedures, playbooks and IR plans.
• Collaborate with IT/security teams to implement controls.
• Mentor junior SOC analysts and provide guidance.
• Generate reports on incidents, trends and KPIs.

Skills

Analytical skills

Problem solving

Communication

Teamwork

Education

Bachelor's degree in Cybersecurity / IT / CS

Tools

Splunk

QRadar

LogRhythm

IDS/IPS

EDR

Job description

About the Role

Our client, a major player in the logistics and supply chain sector, is seeking an experienced Senior Security Operations Center (SOC) Analyst to join their team in Durban, KwaZulu-Natal . This role is crucial for maintaining the security posture of the organization by monitoring, detecting, analyzing, and responding to cybersecurity threats and incidents. The ideal candidate will possess a deep understanding of security technologies, threat intelligence, and incident response procedures. This is a fantastic opportunity to contribute to the security of a large-scale operation in Durban and advance your career in a challenging and rewarding environment.

Key Responsibilities

• Monitor security alerts and events from various security tools (SIEM, IDS/IPS, EDR) in real-time.
• Analyze security incidents to determine scope, impact, and root cause.
• Respond to security incidents according to established procedures, including containment, eradication, and recovery.
• Conduct threat hunting activities to proactively identify and mitigate potential security risks.
• Develop and refine detection rules, correlation logic, and alerting mechanisms within the SIEM.
• Stay updated on the latest cybersecurity threats, vulnerabilities, and attack techniques.
• Create and maintain documentation for SOC procedures, playbooks, and incident response plans.
• Collaborate with other IT and security teams to implement security controls and improve defenses.
• Mentor junior SOC analysts and provide technical guidance.
• Generate regular reports on security incidents, trends, and key performance indicators (KPIs).

Requirements

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field.
• Minimum of 4 years of experience working in a Security Operations Center (SOC) environment.
• Proven experience with SIEM platforms (e.g., Splunk, QRadar, LogRhythm), IDS/IPS, and endpoint detection and response (EDR) solutions.
• Solid understanding of networking concepts, TCP/IP, and common network protocols.
• Experience with incident response methodologies and forensic analysis techniques.
• Familiarity with various operating systems (Windows, Linux) and their security implications.
• Strong analytical, problem-solving, and critical thinking skills.
• Excellent communication and teamwork abilities.
• Relevant certifications such as CompTIA Security+, CEH, GIAC GCIH are highly desirable.
• Willingness to work shifts if required and ability to work effectively in a Durban, KwaZulu-Natal setting.

Benefits

• Our client offers a competitive salary package commensurate with experience and qualifications, along with regular performance reviews and potential for bonuses.
• Employees receive comprehensive medical aid, a retirement fund, and generous annual leave.
• Opportunities for professional development, including advanced cybersecurity training and certifications, are supported.
• The company culture emphasizes teamwork, continuous learning, and a commitment to security excellence.
• This role provides a significant opportunity to grow within the cybersecurity field at a prominent organization in KwaZulu-Natal .