SOC Operations Analyst - Incident Response & Forensics (L2)

Placements24; Paarl; On-site; ZAR 420,000 - 660,000; Full time

Benefits offered by this job

Medical aid

Provident fund

Performance-based bonuses

Job summary

Placements24 is seeking a Cybersecurity Operations Analyst to join its SOC team in Paarl, Western Cape. This Level 2 role focuses on investigating security alerts, analyzing threats, and delivering containment, eradiation, and recovery actions using SIEM, IDS/IPS, and EDR technologies.

You will monitor security events, perform forensic analyses, and contribute to ongoing detection rule development, while collaborating with IT and security colleagues to improve overall resilience.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or related field or equivalent practical experience.
• Minimum of 3 years in a SOC or incident response role.
• Proven experience with SIEM platforms (e.g., Splunk, QRadar, LogRhythm).
• Strong understanding of networking protocols (TCP/IP) and attack vectors.
• Experience with endpoint security solutions (EDR) and antivirus technologies.
• Familiarity with scripting (Python, PowerShell) for automation is a plus.
• Excellent analytical and problem-solving skills with strong communication and teamwork.

Responsibilities

• Monitor and analyze security alerts from SIEM, IDS/IPS, EDR, and other tools.
• Investigate potential incidents, performing in-depth analysis of scope and impact.
• Respond with containment, eradication, and recovery actions.
• Conduct forensic analysis and collect evidence.
• Develop and refine detection rules and use cases for monitoring tools.
• Analyze malware samples and IOCs from threat intel.
• Document incident details and lessons learned.
• Collaborate with security and IT teams to resolve issues.
• Participate in on-call rotation for incident response.
• Stay updated on threats, vulnerabilities, and attack techniques.

Skills

Analytical thinking

Teamwork

Decision making

Incident response

Education

Bachelor's degree in CS/InfoSec or related

Tools

Splunk

QRadar

LogRhythm

EDR tools

Job description

Placements24 is seeking a Cybersecurity Operations Analyst to join its SOC team in Paarl, Western Cape. This Level 2 role focuses on investigating security alerts, analyzing threats, and delivering containment, eradiation, and recovery actions using SIEM, IDS/IPS, and EDR technologies.

You will monitor security events, perform forensic analyses, and contribute to ongoing detection rule development, while collaborating with IT and security colleagues to improve overall resilience.