Senior Security Operations Center (SOC) Analyst (Remote-First)

Placements24; Bloemfontein; Hybrid; ZAR 900,000 - 1,300,000; Full time

Benefits offered by this job

Remote-first culture

Competitive salary + performanceBonues

Medical aid

Life insurance

Retirement savings options

Continuous learning and certifications

Job summary

Placements24 is seeking a Senior SOC Analyst for a remote-first role to monitor, detect, and respond to security threats across a global network. You will work in a distributed team, analyze incidents, and lead containment and recovery efforts while mentoring junior members.

The ideal candidate has 5+ years in SOC, strong SIEM/EDR experience, and solid incident response knowledge. Remote work with flexible hours and opportunities for certification are offered.

Qualifications

• Bachelor's degree in Cybersecurity, CS, IT, or related field.
• 5+ years in SOC or similar incident response.
• Proficiency with SIEM tools (Splunk, QRadar, LogRhythm).
• Experience with EDR and network security monitoring tools.
• Strong understanding of attack vectors and malware analysis.
• Familiarity with incident response frameworks.
• Excellent analytical and problem-solving skills.
• Strong written and verbal communication; remote team work.

Responsibilities

• Monitor alerts from SIEM, IDS/IPS, EDR, and threat intel feeds.
• Analyze incidents to determine scope, impact, root cause.
• Investigate suspicious activities and potential breaches.
• Develop and execute incident response plans including containment and recovery.
• Use forensic tools to collect and analyze digital evidence.
• Report on emerging threats and vulnerabilities.
• Create incident reports for management and stakeholders.
• Improve SOC tools, processes, and playbooks.
• Mentor junior SOC analysts.
• Collaborate with security teams to strengthen security posture.

Skills

Analytical thinking

Problem-solving

Communication (written & verbal)

Remote collaboration

Education

Bachelor's degree in Cybersecurity/CS/IT

Tools

Splunk

QRadar

LogRhythm

EDR tools

Network security monitoring tools

Job description

About the Role

Our client is committed to a remote-first operational model and is actively seeking a highly skilled Senior Security Operations Center (SOC) Analyst to bolster their cybersecurity defense capabilities. In this crucial role, you will be responsible for monitoring, detecting, analyzing, and responding to security threats and incidents across our client's global network infrastructure. You will leverage advanced security tools and technologies to identify malicious activities, investigate security breaches, and implement containment strategies. This position requires a proactive mindset, exceptional analytical skills, and the ability to perform under pressure in a fast-paced, distributed environment. As a Senior Analyst, you will also contribute to mentoring junior team members and improving SOC processes and procedures for our client, operating entirely remotely from Bloemfontein or elsewhere.

Key Responsibilities

• Monitor security alerts from various sources, including SIEM, IDS/IPS, EDR, and threat intelligence feeds.
• Analyze security incidents to determine scope, impact, and root cause.
• Perform in-depth investigations of suspicious activities and potential security breaches.
• Develop and execute incident response plans, including containment, eradication, and recovery.
• Utilize forensic tools and techniques to collect and analyze digital evidence.
• Identify and report on emerging threats and vulnerabilities relevant to the organization.
• Create detailed incident reports and documentation for management and relevant stakeholders.
• Contribute to the continuous improvement of SOC tools, processes, and playbooks.
• Mentor and provide guidance to junior SOC analysts.
• Collaborate with other security teams to enhance overall security posture.

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field.
• Minimum of 5 years of experience in a Security Operations Center (SOC) environment or similar incident response role.
• Proficiency in using and analyzing data from SIEM tools (e.g., Splunk, QRadar, LogRhythm).
• Experience with endpoint detection and response (EDR) solutions and network security monitoring tools.
• Strong understanding of common attack vectors, malware analysis, and intrusion detection techniques.
• Familiarity with incident response frameworks and procedures.
• Excellent analytical, critical thinking, and problem-solving skills.
• Strong written and verbal communication skills, with the ability to document findings clearly.
• Ability to work independently and collaboratively within a remote team structure.
• Relevant security certifications such as GSEC, GCIH, CEH, or CompTIA Security+ are highly desirable.

Benefits

• Our client embraces a remote-first culture, offering unparalleled flexibility and work-life integration.
• This position includes a competitive salary and performance-based bonuses.
• We provide a comprehensive benefits package, including medical aid, life insurance, and retirement savings options.
• Opportunities for continuous learning, advanced training, and professional certifications are readily available to support your career growth.
• Join a dedicated and talented global security team, working with cutting-edge technologies to protect our client's digital assets from anywhere, significantly impacting cybersecurity operations.