SOC Analyst: Incident Response & Threat Hunting

Integrity360; Cape Town; On-site; ZAR 420,000 - 600,000; Full time

Job summary

Integrity360 in Cape Town seeks a Cybersecurity Incident Response Specialist to strengthen our blue team. You’ll lead incident investigations, triage alerts, and coordinate with clients for containment and root-cause analysis.

You’ll perform threat hunting, refine response processes, and collaborate with Detection to enhance detections. Proficiency with Splunk/QRadar/Elastic Stack and solid networking knowledge are essential.

Qualifications

• Minimum 2–4 years of cybersecurity experience in a SOC/CSIRT or similar.
• Experience with security log investigations across multiple sources.
• Strong networking knowledge to understand network-based attacks.
• Familiarity with SIEM technologies such as Splunk, QRadar, or Elastic Stack.
• Bachelor’s degree in Computer Science or Information Technology preferred; relevant certs advantageous.

Responsibilities

• Incident Investigation: triage security alerts and conduct root-cause analysis.
• Threat Hunting: identify IOCS and suspicious activity across client environments.
• Process Improvement: align with Detection to refine detection rules and reduce false positives.
• Efficiency Optimization: assist in automating and streamlining incident workflows.
• Incident Management: document vulnerabilities and contribute to incident reports.
• Client Communication: maintain clear, professional updates throughout incidents.

Skills

SOC operations

Threat hunting

Incident response

Log analysis

Networking fundamentals

SIEM basics

Education

Bachelor's degree in Computer Science or IT

Certifications (Security+, PenTest+) advantageous

Tools

Splunk

QRadar

Elastic Stack

Job description

Integrity360 in Cape Town seeks a Cybersecurity Incident Response Specialist to strengthen our blue team. You’ll lead incident investigations, triage alerts, and coordinate with clients for containment and root-cause analysis.

You’ll perform threat hunting, refine response processes, and collaborate with Detection to enhance detections. Proficiency with Splunk/QRadar/Elastic Stack and solid networking knowledge are essential.