SOC Engineer & Threat Hunter (Elastic + Wazuh)

Redherd.Io; Johannesburg; On-site; ZAR 600,000 - 900,000; Full time

Benefits offered by this job

Flexible hours

Travel to client sites

Structured training & certification

On-site work in Johannesburg

Job summary

RedHerd is seeking a SOC Technical Specialist in Johannesburg, offering a hybrid of hands-on security engineering and SOC operations. The role combines investigating and hunting threats with deploying and maintaining Elastic and Wazuh platforms for multiple client environments.

The position is office-based with flexible hours and travel to client sites. Ideal candidates have 2+ years in SOC, strong SIEM experience, and good communication skills in English.

Qualifications

• Two+ years in a SOC, security monitoring or related technical security role.
• Hands-on operational experience with Elastic and Wazuh in production.
• Linux and Windows administration.
• Clear written English for notes/reports.
• Willingness to travel for client installations.

Responsibilities

• Monitor and triage security alerts, events and cases across client environments.
• Investigate suspicious activity using endpoint, network, identity, and application telemetry.
• Deploy, configure and maintain Elastic- and Wazuh-based SOC installations.
• Onboard log sources and parse, normalise telemetry.
• Build dashboards, alerts, and detection rules tuned to reduce noise.
• Support client installations remotely and on site.
• Write investigation notes, incident timelines, and client-facing reports.

Skills

Elastic

Wazuh

Linux

Windows

SOC monitoring

Threat hunting

Tools

Kibana

Logstash

Elastic Agent

Job description

RedHerd is seeking a SOC Technical Specialist in Johannesburg, offering a hybrid of hands-on security engineering and SOC operations. The role combines investigating and hunting threats with deploying and maintaining Elastic and Wazuh platforms for multiple client environments.

The position is office-based with flexible hours and travel to client sites. Ideal candidates have 2+ years in SOC, strong SIEM experience, and good communication skills in English.