Senior SIEM & Security Operations Lead

Placements24; Cape Town; On-site; ZAR 1,200,000 - 1,800,000; Full time

Benefits offered by this job

Competitive salary and bonuses

Health insurance

Retirement savings plan

Professional growth and training

Access to advanced cybersecurity tools

Cape Town relocation assistance

Career progression pathways

Conferences and training access

Employee assistance program

Job summary

Placements24 seeks a Lead Security Operations Engineer to spearhead SIEM operations in Cape Town. You will architect, deploy, manage, and optimize the enterprise SIEM platform while leading a team of engineers to ensure effective threat detection and rapid incident response.

The role demands extensive SIEM experience (Splunk, QRadar, LogRhythm), solid security monitoring, and incident-handling expertise. This is a strategic opportunity to shape security ops in a vibrant city.

Qualifications

• Bachelor's degree as listed; 7+ years in information security, 4+ years in SIEM engineering/operations.
• Demonstrated experience leading technical teams.
• In-depth knowledge of SIEM platforms (Splunk, QRadar, LogRhythm).
• Strong networking, Windows/Linux, and cloud understanding.
• Experience with scripting for automation (Python, PowerShell).
• GIAC GCSEA or equivalent preferred.

Responsibilities

• Lead design, implementation, and maintenance of the SIEM platform.
• Develop and refine correlation rules, use cases, and alert logic.
• Manage and mentor a team of SIEM engineers and security analysts.
• Oversee ingestion/normalization of log data from diverse sources.
• Conduct threat hunting and forensic investigations using SIEM data.
• Ensure SIEM is scalable, resilient, and optimized.
• Collaborate with Incident Response, Vulnerability Management teams.
• Develop SOPs for SIEM operations and incident handling.
• Evaluate new SIEM technologies and features to improve detection.
• Provide guidance on security monitoring best practices.

Skills

Team leadership

Threat detection

Incident response

Cloud environments

Networking knowledge

Automation scripting

Education

Bachelor's degree in Computer Science / IT / Cybersecurity

Tools

Splunk

QRadar

LogRhythm

Python

PowerShell

Job description

Placements24 seeks a Lead Security Operations Engineer to spearhead SIEM operations in Cape Town. You will architect, deploy, manage, and optimize the enterprise SIEM platform while leading a team of engineers to ensure effective threat detection and rapid incident response.

The role demands extensive SIEM experience (Splunk, QRadar, LogRhythm), solid security monitoring, and incident-handling expertise. This is a strategic opportunity to shape security ops in a vibrant city.