SOC Analyst II: Threat Detection & Incident Response

Placements24; Durban; On-site; ZAR 420,000 - 560,000; Full time

Benefits offered by this job

Medical aid

Pension fund

Paid annual leave

On-going training

Certifications

Job summary

Placements24 is seeking a Cybersecurity Operations Center (SOC) Analyst (Level 2) for our client in Durban, KwaZulu-Natal. The role requires monitoring, investigating, and responding to security events to protect critical assets within a 24/7 SOC environment.

You will work in shifts, providing mentorship to Level 1 analysts and refining incident response playbooks while collaborating closely with a dedicated security team.

Qualifications

• Bachelor’s or Diploma in IT/Cybersecurity or related field.
• 3+ years of SOC or similar cybersecurity operations experience.
• Hands-on with SIEM platforms (Splunk, ELK/QRadar).
• Knowledge of attack vectors, malware, intrusion techniques, and networking basics.

Responsibilities

• Monitor SIEM for suspicious activity and analyze alerts.
• Investigate security incidents, determine scope and impact.
• Triage and contain incidents per playbooks; escalate as needed.
• Contribute to incident response playbooks and SOPs.
• Mentor SOC Level 1 analysts and participate in on-call rotations.

Skills

Analytical thinking

Communication skills

Work under pressure

Team collaboration

Education

Diploma or Bachelor’s degree in IT/Cybersecurity

Tools

Splunk

ELK Stack

QRadar

EDR tools

Job description

Placements24 is seeking a Cybersecurity Operations Center (SOC) Analyst (Level 2) for our client in Durban, KwaZulu-Natal. The role requires monitoring, investigating, and responding to security events to protect critical assets within a 24/7 SOC environment.

You will work in shifts, providing mentorship to Level 1 analysts and refining incident response playbooks while collaborating closely with a dedicated security team.