SOC Security Analyst: Threat Detection & Response

Sasso Consulting (Pty) Ltd; Johannesburg; On-site; ZAR 420,000 - 660,000; Full time

Job summary

Sasso Consulting (Pty) Ltd seeks skilled Cyber Security SOC Analysts to monitor, detect, investigate and respond to threats across enterprise IT environments. Role requires hands-on SIEM/EDR/XDR experience and incident handling within an SOC setting.

The successful candidates will analyze security alerts, correlate events, and support containment and remediation efforts, working with cross-functional teams to improve security monitoring and incident response processes.

Qualifications

• Relevant diploma or degree in Information Technology, Computer Science, Cybersecurity, Information Security, Network Engineering or a related discipline.
• Typically 3–5 years of relevant hands-on experience in cybersecurity monitoring, SOC operations, security event analysis or incident investigation.
• Proven practical experience working within an enterprise Security Operations Centre or equivalent security monitoring environment.
• Strong hands-on experience with at least one enterprise SIEM platform.
• Practical experience investigating security alerts and analysing security events.
• Familiarity with EDR, XDR, firewall and network security monitoring technologies.
• Strong understanding of cybersecurity threats, attack techniques and indicators of compromise.
• Experience conducting security incident triage, classification and escalation.
• Knowledge of Windows and Linux operating systems.
• Understanding of Microsoft Active Directory, authentication systems and identity-related security threats.
• Good understanding of TCP/IP networking, DNS, HTTP/HTTPS and common network protocols.
• Familiarity with the MITRE ATT&CK framework.
• Experience analysing security logs and correlating information from multiple sources.
• Understanding of incident response procedures and cybersecurity investigation principles.
• Familiarity with cloud security monitoring environments would be advantageous.
• Strong analytical, technical troubleshooting and documentation skills.

Responsibilities

• Security Operations Centre Monitoring: Monitor enterprise security systems, networks, endpoints, applications and cloud environments for potential threats.
• Security Event Analysis and Investigation: Investigate security alerts and analyse logs and telemetry across systems.
• Threat Detection and Security Analysis: Apply MITRE ATT&CK and threat intel to detection activities.
• Incident Response and Escalation: Perform initial response, classify and escalate incidents as needed.
• SIEM, EDR and Security Technology Operations: Operate SIEM/EDR/XDR platforms and tune detection rules.
• SOC Reporting and Documentation: Maintain investigation records and SOC dashboards.
• Collaboration: Work with cybersecurity, infrastructure, networking and applications teams.

Skills

SOC operations

SIEM

EDR/XDR

Windows

Linux

Threat detection

Incident investigation

Education

Diploma or degree in Information Technology/Computer Science/Cybersecurity/Information Security/Network Engineering

Tools

Microsoft Sentinel

Splunk Enterprise Security

IBM QRadar

Elastic Security

ArcSight

LogRhythm

Cloud security monitoring tools

Job description

Sasso Consulting (Pty) Ltd seeks skilled Cyber Security SOC Analysts to monitor, detect, investigate and respond to threats across enterprise IT environments. Role requires hands-on SIEM/EDR/XDR experience and incident handling within an SOC setting.

The successful candidates will analyze security alerts, correlate events, and support containment and remediation efforts, working with cross-functional teams to improve security monitoring and incident response processes.