Senior SIEM & SOC Engineer - Hybrid (Sandton, ZA)

Placements24; Sandton; Hybride; ZAR 900 000 - 1 200 000; Plein temps

Avantages offerts par ce poste

Medical benefits

Retirement benefits

Performance incentives

Training & development

Hybrid work environment

Résumé du poste

Placements24 is seeking a Senior Security Engineer to strengthen the SOC for a leading financial institution in Sandton, Gauteng. You will design, deploy and optimize SIEM infrastructure and security tooling, monitor threats, and drive incident response.

The role combines hands-on engineering with collaborating across IT teams in a hybrid setup, with office time in Sandton and remote flexibility. Ideal candidates have 5+ years in security operations and strong SIEM expertise.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or related field, or equivalent experience.
• Minimum 5 years of security operations, SIEM administration, or security engineering.
• Proven expertise in managing and tuning SIEM platforms, including rule development and log source integration.
• Strong understanding of network protocols, operating systems, and common attack techniques.
• Experience with scripting languages (Python, PowerShell) for automation is a plus.
• Familiarity with threat intelligence feeds and their integration into SIEM.
• Excellent analytical, problem-solving, and troubleshooting skills.
• Strong communication skills, with the ability to articulate technical findings clearly.
• Relevant security certifications (e.g., GIAC GSEC, GCIA, Splunk Enterprise Certified Admin) are advantageous.

Responsabilités

• Design, deploy, and manage SIEM solutions (e.g., Splunk, QRadar, ELK Stack) for log aggregation, correlation, and alerting.
• Develop and optimize SIEM use cases, detection rules, and dashboards to identify security incidents.
• Perform threat hunting and analysis of security events to uncover sophisticated threats.
• Provide Tier 3 support for SOC analysts, assisting with complex incident investigations.
• Collaborate with IT infrastructure and application teams to ensure proper logging and event data collection.
• Stay current with emerging threats, vulnerabilities, and security technologies.
• Contribute to the automation of security operations tasks and workflows.
• Participate in incident response activities and provide technical expertise.
• Document security processes, configurations, and procedures.

Connaissances

Threat hunting

Incident response

Security monitoring

Communication

Python

PowerShell

Formation

Bachelor's degree in Computer Science / Information Security

Outils

Splunk

QRadar

ELK Stack

Python

PowerShell

Description du poste

Placements24 is seeking a Senior Security Engineer to strengthen the SOC for a leading financial institution in Sandton, Gauteng. You will design, deploy and optimize SIEM infrastructure and security tooling, monitor threats, and drive incident response.

The role combines hands-on engineering with collaborating across IT teams in a hybrid setup, with office time in Sandton and remote flexibility. Ideal candidates have 5+ years in security operations and strong SIEM expertise.