About the Role
Our client is embarking on a remote-first initiative and is seeking a highly experienced Senior Security Operations Center (SOC) Analyst to join their globally distributed team. This role is critical in maintaining the security posture of the organization by monitoring, detecting, and responding to cybersecurity threats in real-time. You will leverage advanced security tools and platforms to analyze security events, investigate potential incidents, and coordinate response efforts. This position offers a unique opportunity to shape the remote SOC operations and contribute to a robust cybersecurity framework from the comfort of your home office, serving our operations across various regions, including those connected to Richards Bay, KwaZulu-Natal . We are looking for a proactive, detail-oriented professional with a passion for cybersecurity and a proven ability to handle high-pressure situations.
Key Responsibilities
- Monitor security alerts and events from various sources, including SIEM, IDS/IPS, EDR, and threat intelligence feeds.
- Analyze security incidents, determine scope, and provide initial triage and containment actions.
- Perform in-depth investigations into suspicious activities and potential security breaches.
- Develop and refine detection rules, use cases, and correlation logic within the SIEM platform.
- Collaborate with incident response teams to manage and mitigate security threats effectively.
- Stay current with the latest cybersecurity threats, vulnerabilities, and attack techniques relevant to a remote-first environment.
- Document incident details, actions taken, and lessons learned in a clear and concise manner.
- Contribute to the development and improvement of SOC procedures, playbooks, and documentation.
- Mentor junior SOC analysts and provide guidance on security best practices.
- Participate in threat hunting activities to proactively identify and mitigate emerging threats.
Requirements
- Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field, or equivalent demonstrable experience.
- Minimum of 5 years of experience working in a Security Operations Center (SOC) or similar security monitoring role.
- Proven experience with SIEM platforms (e.g., Splunk, QRadar, LogRhythm) and EDR solutions.
- Strong understanding of network protocols, operating systems (Windows, Linux), and common attack vectors.
- Experience with incident response procedures and methodologies.
- Familiarity with threat intelligence platforms and their application in SOC operations.
- Excellent analytical, problem-solving, and critical thinking skills.
- Strong communication and collaboration skills, essential for effective remote teamwork.
- Ability to work independently and manage time effectively in a remote setting.
- Relevant security certifications such as CompTIA Security+, CySA+, GSEC, or equivalent are highly desirable.
Benefits
- Competitive salary package commensurate with experience and remote work.
- Comprehensive health, dental, and vision insurance plans.
- Generous allowance for home office setup and professional development.
- Flexible working hours and a work-life balance focused culture.
- Opportunities for career advancement and specialization within cybersecurity.
- Exposure to a wide range of security technologies and challenges.
- Be part of a pioneering remote-first security team, contributing to global security efforts, even from a distance from locations like Richards Bay, KwaZulu-Natal .