About the Role
Our client, a rapidly growing technology services provider based in Polokwane, Limpopo , is seeking an experienced Senior Security Operations Center (SOC) Analyst. This role is critical for the proactive monitoring, detection, and response to cyber threats targeting the company and its clients. You will be responsible for analyzing security events, investigating potential incidents, utilizing SIEM and other security tools, and contributing to the continuous improvement of SOC processes and capabilities. The ideal candidate has a proven track record in incident detection and response, a strong understanding of threat intelligence, and excellent analytical skills. This is an excellent opportunity to join a forward-thinking organization and make a significant impact on cybersecurity operations.
Key Responsibilities
- Monitor security alerts and events from various security tools, including SIEM, IDS/IPS, EDR, and firewalls.
- Analyze security incidents, determine scope and impact, and lead the initial response and containment efforts.
- Investigate complex security threats and advanced persistent threats (APTs) using forensic techniques.
- Develop and refine detection rules, correlation logic, and alerting mechanisms within the SIEM platform.
- Analyze threat intelligence feeds and correlate them with observed security events.
- Document security incidents, investigation steps, and resolution activities in detail.
- Contribute to the development and maintenance of incident response playbooks and SOC procedures.
- Mentor and guide junior SOC analysts, providing technical expertise and support.
- Participate in on-call rotation for incident response outside of business hours.
- Stay up-to-date with the latest cybersecurity threats, attack vectors, and mitigation strategies.
Requirements
- Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field, or equivalent practical experience.
- Minimum of 4 years of experience in a Security Operations Center (SOC) or incident response role.
- Proficiency in using SIEM tools (e.g., Splunk, QRadar, ELK Stack) for security monitoring and analysis.
- Strong understanding of network protocols, operating systems (Windows, Linux), and common attack methodologies.
- Experience with endpoint detection and response (EDR) tools and network security monitoring (NSM).
- Knowledge of threat intelligence platforms and frameworks.
- Excellent analytical, critical thinking, and problem-solving skills.
- Strong written and verbal communication skills, with the ability to document complex findings clearly.
- Ability to work effectively in a high-pressure environment and manage multiple concurrent incidents.
- Relevant security certifications such as CompTIA Security+, CySA+, GCIA, or GCIH are highly desirable.
Benefits
- A competitive salary and benefits package tailored to your experience.
- Opportunities for continuous learning and advanced training in cybersecurity.
- A challenging and dynamic work environment in Polokwane.
- The chance to work with a skilled team and contribute to protecting critical infrastructure.
- Exposure to a wide range of security technologies and platforms.
- Generous annual leave and other employment benefits.
- Career advancement opportunities within the cybersecurity domain.
- Supportive management committed to employee growth and development.