About the Role
Our client, a rapidly expanding technology services company based in Klerksdorp, North West, is actively seeking a highly experienced Senior Security Operations Center (SOC) Analyst. This crucial role involves the continuous monitoring of an organization's IT infrastructure for security threats and incidents. The ideal candidate will possess advanced skills in threat detection, analysis, incident response, and SIEM tool utilization. You will be instrumental in protecting our client's digital assets, ensuring the timely and effective mitigation of security events, and contributing to the overall security posture. This is an exceptional opportunity to join a leading organization in Klerksdorp and play a pivotal role in safeguarding sensitive information. We are committed to maintaining a secure environment through proactive vigilance and rapid response capabilities. You will work within a dedicated SOC team, leveraging cutting-edge technologies to identify and neutralize threats before they can cause significant damage.
Key Responsibilities
- Monitor security alerts and events from various sources, including SIEM, IDS/IPS, firewalls, and endpoint security solutions.
- Analyze security incidents to determine their scope, impact, and root cause.
- Initiate and manage incident response procedures, coordinating efforts with relevant teams.
- Develop and refine threat detection rules and signatures to enhance monitoring capabilities.
- Conduct forensic analysis of security breaches to gather evidence and support investigations.
- Perform regular health checks and tuning of SOC tools and technologies.
- Stay current with the latest cybersecurity threats, vulnerabilities, and attack vectors.
- Create detailed incident reports and documentation for management and stakeholders.
- Mentor and guide junior SOC analysts, sharing knowledge and best practices.
- Contribute to the development and improvement of SOC playbooks and procedures.
Requirements
- Bachelor's degree in Computer Science, Information Security, or a related field; relevant certifications such as CompTIA Security+, CEH, or GCIH are highly valued.
- A minimum of 5 years of experience in a SOC environment or similar cybersecurity role.
- Extensive experience with SIEM platforms (e.g., Splunk, QRadar, ArcSight).
- Proficiency in analyzing network traffic, log data, and system events.
- Strong understanding of operating systems (Windows, Linux), networking concepts, and common attack methodologies.
- Experience with incident response frameworks and best practices.
- Excellent analytical, problem-solving, and decision-making skills under pressure.
- Effective communication and teamwork abilities.
- Ability to work in shifts and provide 24/7 coverage as needed, based in Klerksdorp.
- Familiarity with threat intelligence platforms is a plus.
Benefits
- Competitive salary package designed to attract top talent.
- Comprehensive medical aid and pension fund benefits.
- Opportunities for advanced cybersecurity training and certifications.
- A dynamic and challenging work environment.
- Access to cutting-edge security technologies and tools.
- Generous annual leave allowance.
- Shift allowances and potential for overtime pay.
- Employee assistance programs.
- Career progression pathways within the security domain.
- Regular team social events and professional development workshops.