SOC Engineer: Incident Response & Threat Analysis

360 Smart Networks; Stellenbosch; On-site; ZAR 600,000 - 900,000; Full time

Job summary

360 Smart Networks is seeking a Security Engineer to join our South African team, focusing on incident response, threat analysis, vulnerability management, and security operations across client environments. You will work with CrowdStrike, Petra, Blumira, and broader security stacks to improve detection, containment, and remediation.

The role emphasizes operational response, documentation, and continuous improvement within a fast-paced MSP/multi-client setting, with non-negotiable working hours

Qualifications

• 3 to 5 years in Security Operations/Incident Response
• Experience in MSP/MSSP or multi-client environments preferred
• Hands-on with CrowdStrike Falcon
• Vulnerability management and threat analysis experience
• Able to write incident summaries and after-action reports

Responsibilities

• Monitor network traffic, alerts, endpoints, and logs for suspicious activity
• Investigate, contain, and respond to incidents with clear notes and remediation
• Support security operations across CrowdStrike, Petra, Blumira
• Conduct vulnerability assessments and remediation tracking
• Lead or contribute to incident response and root cause analysis
• Maintain accurate incident notes, playbooks, SOPs, and security docs
• Collaborate with engineers, vendors, and leadership for service quality

Skills

Security Operations

Incident Response

Vulnerability Management

Threat Analysis

Documentation

Education

CompTIA Security+ (or equivalent)

CompTIA CySA+ (or equivalent)

ISC2 SSCP (or equivalent)

Tools

CrowdStrike Falcon

Blumira

Petra

Microsoft 365

Azure

Microsoft Entra ID

Purview

ConnectWise

SIEM

Job description

360 Smart Networks is seeking a Security Engineer to join our South African team, focusing on incident response, threat analysis, vulnerability management, and security operations across client environments. You will work with CrowdStrike, Petra, Blumira, and broader security stacks to improve detection, containment, and remediation.

The role emphasizes operational response, documentation, and continuous improvement within a fast-paced MSP/multi-client setting, with non-negotiable working hours