SOC Engineer: SIEM & Detection Architect

Sasso Consulting (Pty) Ltd; Johannesburg; On-site; ZAR 520,000 - 780,000; Full time

Job summary

Sasso Consulting (Pty) Ltd invites experienced Cyber Security SOC Engineers to design, implement and maintain enterprise security monitoring across on‑premises and cloud environments. You will manage SIEM, EDR/XDR platforms, develop detection capabilities and ensure reliable, actionable security telemetry for analysts.

The role focuses on building scalable SOC infrastructure, configuring log ingestion, and integrating security tools to support incident response and threat detection across hybrid

Qualifications

• Diploma or degree in Information Technology, Computer Science, Cybersecurity, Information Security, or related discipline.
• Typically 3–5 years of hands-on experience in SOC engineering, SIEM engineering or related cybersecurity specialization.
• Proven experience implementing, configuring or administering enterprise SIEM or security monitoring platforms.

Responsibilities

• Design, implement, configure and maintain enterprise SOC security monitoring infrastructure.
• Deploy and administer SIEM, EDR, XDR and related security monitoring technologies.
• Develop and maintain scalable security monitoring architectures and data ingestion pipelines.
• Configure log collection, processing, correlation and retention across sources.
• Integrate security monitoring with enterprise and cloud platforms.
• Support SOC platform upgrades, migrations and configuration management.
• Develop and maintain detection rules and dashboards to improve alerting accuracy.

Skills

SOC engineering

SIEM administration

Threat detection

Education

Diploma/degree in IT or Cybersecurity

Tools

SIEM platforms

EDR/XDR technologies

SOAR tooling

Job description

Sasso Consulting (Pty) Ltd invites experienced Cyber Security SOC Engineers to design, implement and maintain enterprise security monitoring across on‑premises and cloud environments. You will manage SIEM, EDR/XDR platforms, develop detection capabilities and ensure reliable, actionable security telemetry for analysts.

The role focuses on building scalable SOC infrastructure, configuring log ingestion, and integrating security tools to support incident response and threat detection across hybrid