Senior SOC Analyst - MDR & Threat Hunting Lead

BDO; Cape Town; On-site; ZAR 600,000 - 900,000; Full time

Job summary

BDO Wave in Cape Town seeks a seasoned L3 SOC Analyst to join our MDR delivery, collaborating with a UK-based team. You will triage alerts, lead threat hunts, refine SIEM rules and playbooks, and mentor junior analysts to strengthen client security postures.

The role focuses on proactive threat detection, incident handling, and continuous improvement of MDR capabilities within a 24/7 framework for global clients. Local support and offshore coordination are key components of the position.

Qualifications

• 3 to 5 years experiences as a L3 SOC Analyst/Senior security operations professional.
• Experience onboarding, tuning, reporting and configuring SIEM solutions.
• Understanding of OS and networking at a low level.
• In-depth experience with one or more Security and Event Management and XDR Solutions.
• Understanding of system administration (Linux, Windows, Mac).
• Actionable knowledge of MITRE ATT&CK framework.
• Excellent interpersonal skills with the ability to explain technical problems to non-technical business stakeholders at all levels.
• Strong written and oral communication skills.

Responsibilities

• Respond to alerts raised by L1/L2 analysts, as the technical escalation point.
• QA of investigations and notification and direct L1/L2 accordingly.
• Perform detailed analysis and undertakes in-depth investigation into potential incidents.
• Raise incidents where necessary and support the SOC manager during true positive incidents.
• Conduct threat hunting across client environments.
• Review and action alerts flagged as tuning candidates.
• Help develop and mentor junior members of staff.
• Lead the delivery of SOC/MDR projects.
• Respond to SOC/MDR client’s requests, concerns and suggestions.
• On-board log sources and work on log issues.
• Fine-tune SIEM/EDR platforms to exclude noise and false positives.
• Analyse, define and manage the delivery of new SIEM rules.
• Conduct use case testing and modify/create as required.
• Support UK operations manager in client engagements and/or service meetings.
• Support and develop new SOC playbooks and processes.
• Conduct presentations and updates to the client.
• Respond to incident escalations and provide solid recommendations.
• Conduct threat hunting exercises on SIEM and EDR platforms.
• Develop and improve processes for monitoring and incident qualification.

Skills

Analytical reasoning

Excellent communication

Stakeholder communication

Mentoring junior staff

Team collaboration

Education

Cyber security degree or equivalent experience

Tools

Microsoft Sentinel

SIEM/EDR tools

XDR solutions

KQL / workbook / playbook

Job description

BDO Wave in Cape Town seeks a seasoned L3 SOC Analyst to join our MDR delivery, collaborating with a UK-based team. You will triage alerts, lead threat hunts, refine SIEM rules and playbooks, and mentor junior analysts to strengthen client security postures.

The role focuses on proactive threat detection, incident handling, and continuous improvement of MDR capabilities within a 24/7 framework for global clients. Local support and offshore coordination are key components of the position.