About the Role
Our client, a leading diversified industrial group located in Rustenburg, North West , requires a Senior Security Operations Center (SOC) Analyst to join their dedicated cybersecurity team. This critical role involves the continuous monitoring of security infrastructure, detection of threats, and rapid response to security incidents to protect the organization's operational technology (OT) and information technology (IT) environments. The ideal candidate will have extensive experience in SOC operations, advanced threat analysis, and incident management, with a strong understanding of industrial control systems security. You will play a key part in ensuring the security and availability of our client's vital business operations in North West .
Key Responsibilities
- Monitor security alerts and logs from various sources (SIEM, IDS/IPS, firewalls, endpoints) to identify security threats and incidents.
- Perform in-depth analysis of security events, correlating data to determine the scope and impact of potential breaches.
- Lead incident response activities, including investigation, containment, eradication, and recovery.
- Develop and refine detection rules, use cases, and alert tuning within the SIEM platform.
- Conduct threat hunting exercises to proactively identify advanced persistent threats (APTs).
- Analyze malware samples and understand attacker methodologies.
- Document incident details, actions taken, and provide post-incident reports.
- Stay updated on the latest cyber threats, vulnerabilities, and defensive techniques.
- Mentor and guide junior SOC analysts, sharing knowledge and expertise.
Requirements
- Bachelor's degree in Computer Science, Information Security, or a related field; equivalent practical experience will be considered.
- Minimum of 5 years of experience in a SOC analyst role, with a proven track record of incident detection and response.
- Strong understanding of networking protocols, operating systems (Windows, Linux), and cybersecurity principles.
- Hands-on experience with SIEM tools (e.g., Splunk, QRadar), EDR solutions, and threat intelligence platforms.
- Experience with OT/ICS security is a significant advantage.
- Proficiency in scripting languages (e.g., Python) for automation and analysis.
- Excellent analytical, problem-solving, and decision-making skills.
- Strong communication skills, both written and verbal.
- Relevant certifications such as GSEC, GCIH, GCIA, or CEH are preferred.
Benefits
- Our client offers a competitive salary and benefits package, including comprehensive health insurance, a generous pension fund, and performance-based bonuses.
- We provide ample opportunities for professional development, including access to advanced training and certification programs relevant to cybersecurity and industrial control systems.
- This role is based in Rustenburg and requires regular on-site presence to manage critical security operations.
Join a stable and reputable organization with significant career growth prospects.