Senior Security Operations Center (SOC) Analyst

Placements24; Stellenbosch; Hybrid; ZAR 600,000 - 900,000; Full time

Benefits offered by this job

Medical aid

Retirement fund

Performance bonuses

Professional development

Job summary

Placements24 is seeking a Senior Security Operations Center (SOC) Analyst in a hybrid role based near Paarl, Western Cape. You will monitor security alerts, analyze incidents, and contribute to threat detection and incident response.

The ideal candidate has 3+ years in a SOC, strong SIEM skills (Splunk/QRadar/LogRhythm), and relevant security certifications. You will collaborate with incident response and threat intelligence teams to strengthen defenses.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, IT, or related field.
• Minimum 3 years in a SOC or similar cybersecurity monitoring role.
• Hands-on with SIEM tools (Splunk, QRadar, LogRhythm) and monitoring tech.

Responsibilities

• Monitor security alerts from SIEM, IDS/IPS, firewalls, and endpoints.
• Analyze incidents to determine scope, impact and root cause.
• Perform initial triage and escalate critical incidents as needed.
• Develop detection rules and use cases within SIEM platform.
• Document incident details, actions, and resolutions clearly.
• Assist in SOC playbooks and procedures maintenance.
• Participate in threat hunting activities.
• Stay updated on threats, vulnerabilities and attack vectors.
• Collaborate with incident response and threat intelligence teams.
• Contribute to security awareness and training initiatives.

Skills

Analytical thinking

Problem solving

Communication

Team collaboration

Education

Bachelor's degree in Computer Science / Cybersecurity / IT

Tools

Splunk

QRadar

LogRhythm

Job description

About the Role

Our client, a fast-paced technology solutions provider, is seeking a dedicated Senior Security Operations Center (SOC) Analyst to bolster their cybersecurity defense capabilities. This role, based in Paarl, Western Cape, is crucial for the continuous monitoring, detection, and initial response to cyber threats targeting the organization's infrastructure. You will work within a state-of-the-art SOC environment, utilizing advanced tools to identify and analyze security incidents, escalating complex issues and contributing to the overall security posture. The ideal candidate is detail-oriented, possesses strong analytical skills, and thrives in a high-pressure environment. This position utilizes a Hybrid work model, requiring a balance of on-site presence in Paarl, Western Cape for critical collaboration and remote work flexibility.

Key Responsibilities

• Monitor security alerts and events from various sources, including SIEM, IDS/IPS, firewalls, and endpoints.
• Analyze security incidents to determine scope, impact, and root cause.
• Perform initial triage and investigation of security alerts, escalating critical incidents as needed.
• Develop and refine detection rules and use cases within the SIEM platform.
• Document incident details, actions taken, and resolutions in a clear and concise manner.
• Assist in the development and maintenance of SOC playbooks and procedures.
• Participate in threat hunting activities to proactively identify potential security breaches.
• Stay updated on the latest cyber threats, vulnerabilities, and attack vectors.
• Collaborate with other security teams, including incident response and threat intelligence.
• Contribute to security awareness and training initiatives.

Requirements

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• Minimum of 3 years of experience working in a Security Operations Center (SOC) or a similar cybersecurity monitoring role.
• Hands-on experience with SIEM tools (e.g., Splunk, QRadar, LogRhythm) and other security monitoring technologies.
• Strong understanding of network protocols, common attack vectors, and security principles.
• Experience with analyzing log data, network traffic, and endpoint security alerts.
• Excellent analytical, problem-solving, and critical thinking skills.
• Strong communication skills, both written and verbal.
• Ability to work effectively in a fast-paced, high-pressure environment.
• Relevant certifications such as CompTIA Security+, CySA+, or GCIH are a plus.
• Ability to work effectively in a Hybrid work environment.
• Must be able to commute to Paarl, Western Cape for assigned duties.

Benefits

• Our client offers a competitive salary, a comprehensive benefits package including medical aid, retirement fund, performance bonuses, and opportunities for professional development and further certifications.

Enjoy the flexibility of a Hybrid work model while being part of a dedicated and professional team. This role is based in the picturesque town of Paarl, Western Cape, offering a great work-life balance and the chance to contribute significantly to organizational security.