Senior Security Operations Center (SOC) Analyst - Threat Hunting

Placements24; Mossel Bay; Hybrid; ZAR 900,000 - 1,500,000; Full time

Benefits offered by this job

Competitive salary

Fully remote

Home office allowance

Health insurance

Job summary

Placements24 seeks a Senior SOC Analyst with a strong threat hunting focus to join a fully remote security team. You will proactively hunt threats, analyze logs, and develop detections while supporting incident response. This is ideal for an experienced professional advancing proactive threat detection in a cutting-edge operation.

The role offers remote work from SA, home office allowance, health coverage, and ongoing training with advanced threat intel tools in a collaborative global team.

Qualifications

• Bachelor's degree in CS/IS or related field; relevant certifications are a strong asset.
• Minimum of 5 years in cybersecurity with SOC/IR or threat intel focus.
• Experience with SIEM/EDR and threat hunting is required.

Responsibilities

• Proactively hunt for advanced threats using diverse data sources.
• Develop threat hunting hypotheses from threat intel and TTPs.
• Analyze large logs, network, and endpoint telemetry for IOCs.
• Create detection rules and queries to catch evasive threats.
• Investigate suspected incidents identified through hunting.
• Collaborate with IR to contain and recover from threats.
• Mentor junior analysts in hunting techniques.
• Document methodologies and findings.

Skills

Threat hunting

SOC operations

Incident response

SIEM analysis

EDR

Python

PowerShell

Cloud security

Threat intelligence

Education

Bachelor's degree in Computer Science or Information Security

Certifications: GCIH, GCFA, CySA+

Tools

Splunk

Elastic Stack

EDR tools

Job description

About the Role

Our client is seeking a highly motivated and experienced Senior Security Operations Center (SOC) Analyst with a strong focus on threat hunting to join their fully remote security team. In this role, you will proactively search for undetected threats within our client's complex network environment, going beyond traditional alert-driven detection. As a remote-first organization, we provide a supportive and collaborative virtual workspace, empowering you to make a significant impact from anywhere. Your expertise will be vital in enhancing our defensive capabilities and protecting our organization's critical assets. This is an excellent opportunity for a seasoned professional looking to advance their career in proactive threat detection and analysis within a cutting-edge cybersecurity operation.

Key Responsibilities

• Proactively hunt for advanced threats and sophisticated adversaries using various data sources and analytical techniques.
• Develop and implement threat hunting hypotheses based on threat intelligence, actor TTPs, and environmental knowledge.
• Analyze large datasets of logs, network traffic, and endpoint telemetry to identify anomalies and indicators of compromise (IOCs).
• Develop custom detection rules and queries to identify potential threats that may evade existing security controls.
• Conduct in-depth investigations of suspected security incidents identified through threat hunting activities.
• Collaborate with incident response teams to contain, eradicate, and recover from security threats.
• Stay abreast of the latest threat actor tactics, techniques, and procedures (TTPs) and evolving threat landscape.
• Contribute to the improvement of SOC tools, processes, and playbooks for more effective threat hunting.
• Document hunting methodologies, findings, and recommendations for improving security defenses.
• Mentor junior SOC analysts on advanced threat hunting techniques.

Requirements

• Bachelor's degree in Computer Science, Information Security, or a related field; relevant certifications such as GCIH, GCFA, or CySA+ are a strong asset.
• Minimum of 5 years of experience in cybersecurity, with a significant portion focused on SOC operations, incident response, or threat intelligence.
• Demonstrated experience and passion for proactive threat hunting.
• Proficiency in analyzing security logs, network traffic, and endpoint data using SIEM tools (e.g., Splunk, Elastic Stack) and EDR solutions.
• Strong understanding of attacker methodologies, TTPs, and kill chain models.
• Experience with scripting languages (e.g., Python, PowerShell) for data analysis and automation.
• Excellent analytical, problem-solving, and critical thinking skills.
• Effective communication skills, with the ability to articulate complex findings clearly.
• Ability to work autonomously and manage time effectively in a remote environment.
• Familiarity with cloud security concepts and monitoring in AWS, Azure, or GCP is a plus.

Benefits

• Competitive annual salary of R , commensurate with your advanced skills and experience.
• Fully remote work arrangement, offering unparalleled flexibility.
• Home office setup allowance.
• Comprehensive health, dental, and vision insurance coverage.
• Generous paid time off and public holidays.
• Opportunities for continuous professional development, including specialized training and certifications.
• Access to state-of-the-art threat intelligence platforms and hunting tools.
• Collaborative and highly skilled remote team environment.
• Retirement savings plan.
• Regular virtual team social events and knowledge-sharing sessions.