SOC Level 2: Cybersecurity Operations Analyst

Placements24; Stellenbosch; On-site; ZAR 350,000 - 700,000; Full time

Benefits offered by this job

Competitive salary

Medical aid

Provident fund

Performance-based bonuses

Team events

Wellness programs

Job summary

Placements24 is seeking a Cybersecurity Operations Analyst to join its SOC team in Paarl, Western Cape. You will investigate and respond to security alerts, analyze threats, and mitigate impacts on digital assets using SIEM, IDS/IPS, and EDR tools.

The role requires a 3+ year SOC/IR background, strong networking knowledge, and hands-on experience with SIEM platforms like Splunk, QRadar, or LogRhythm. On-site in Paarl with growth opportunities.

Qualifications

• Degree or equivalent practical experience in a relevant field.
• 3+ years in SOC or incident response.
• Experience with SIEM platforms (Splunk, QRadar, LogRhythm).
• Strong networking and security principle knowledge.
• Experience with EDR and antivirus technologies.
• Scripting for automation is a plus.

Responsibilities

• Monitor and analyze security alerts from SIEM/EDR and other tools.
• Investigate incidents and determine scope and impact.
• Contain, eradicate, and recover from incidents.
• Perform forensic analysis and collect evidence.
• Develop detection rules and use cases for monitoring tools.
• Analyze malware samples and IOCs from threat intel.
• Document incident actions and lessons learned.
• Collaborate with security and IT teams to resolve issues.
• Participate in on-call rotation for IR.
• Stay updated on threats and attack techniques.

Skills

Bachelor's degree in Computer Science/

3+ years SOC/IR experience

SIEM platforms

Networking fundamentals

EDR/antivirus knowledge

Scripting for automation (Python/Power

Analytical problem-solving

Communication and teamwork

Security certifications advantageous

Education

Bachelor's degree in Computer Science, Information Security, or related field

Tools

Splunk

QRadar

LogRhythm

Job description

Placements24 is seeking a Cybersecurity Operations Analyst to join its SOC team in Paarl, Western Cape. You will investigate and respond to security alerts, analyze threats, and mitigate impacts on digital assets using SIEM, IDS/IPS, and EDR tools.

The role requires a 3+ year SOC/IR background, strong networking knowledge, and hands-on experience with SIEM platforms like Splunk, QRadar, or LogRhythm. On-site in Paarl with growth opportunities.