SOC Senior Analyst

S-RM; Cape Town; Hybrid; ZAR 60 000 - 100 000; Full time

Job summary

An innovative consultancy is seeking a Senior Analyst for their rapidly growing Cyber Security division. This role is pivotal in overseeing the Security Operations Center (SOC) activities, ensuring effective monitoring and response to security threats. The ideal candidate will leverage their expertise in incident response and threat intelligence to lead a dynamic team. With a focus on collaboration and continuous improvement, you will have the opportunity to mentor junior analysts and enhance security practices. This hybrid role offers the chance to work remotely while also engaging in in-office teamwork, making it perfect for those who thrive in a flexible environment.

Benefits

Health and wellness programs

Professional development opportunities

Flexible working hours

Team-building activities

Qualifications

• 3+ years of experience in SOC or cybersecurity operations.
• Strong understanding of EDR and SecOps toolsets.
• Proven ability to lead incident response efforts.

Responsibilities

• Lead SOC team activities ensuring efficient monitoring and response.
• Coordinate responses to high-severity security incidents.
• Conduct proactive threat hunting exercises.

Skills

Cybersecurity

Incident Response

Threat Intelligence

Malware Analysis

Communication Skills

Data Analysis Skills

Education

Bachelor's Degree in Cybersecurity

Master's Degree in Computer Science

Tools

Splunk

Microsoft Defender for Endpoint

SentinelOne

SQL

Tableau

Job description

SRM is a global intelligence and cyber security consultancy. Since 2005 weve helped some of the most demanding clients in the world solve some of their toughest information security challenges.

Weve been able to do this because of our outstanding people. Were committed to developing sharp curious driven individuals who want to think critically solve complex problems and achieve success.

But we also know that work isnt everything. Its about the lives and careers it helps us build. Were immensely proud of this culture and we invest in our peoples wellbeing learning and ideas every day.

Were excited youre thinking about joining us.

WORKING IN CYBER AT SRM

Our Cyber Security division is the fastestgrowing part of SRM. The cyber sector is always evolving and our Advisory Ethical Hacking and Incident Response practices are in more demand than ever.

Were building a team to meet this challenge. Were quick to respond innovate and improve. We dont get too hung up on hierarchy or bureaucracy. If your ideas are good enough well empower you to implement them. If youre the best person to talk to a customer youll get that opportunity regardless of the title in your email signature. And when you need a hand your team will always have your back.

We also dont believe theres a typical cyber security professional. Weve built a team of intelligence analysts technical specialists software developers investigators risk managers and more. Youll always find a range of perspectives and expertise to help you learn and grow.

If that sounds like your kind of team wed like to hear from you.

THE ROLE

Our Security Operations Centre is a critical part of our Cybersecurity divisions success.

As a Senior Analyst (SOC) you will deploy your cybersecurity expertise in a vital delivery role across our managed detection and response services.

In this role you will exploit infrastructure and tools that power our Security Operations Center (SOC) to deliver desired security outcomes for our managed services clients. The ideal candidate will be highly proficient in using security platforms such as SIEM SOAR EDR and other advanced security technologies. You will have experience leading other analysts or subteams in a SOC environment and be comfortable acting as a point of escalation. As a senior analyst you will be responsible for highlevel incident management process improvement and mentoring junior analysts. This hybrid role involves both remote work and some inoffice presence for collaboration teamwork and development projects.

Delivery

1. Lead Security Operations : Oversee daytoday SOC team activities ensuring efficient monitoring detection and response to security threats across the organization.
2. Incident Response : Lead and coordinate responses to highseverity security incidents conducting indepth analysis containment and remediation as required.
3. Team Leadership : Provide guidance and mentorship to junior SOC analysts fostering skill development and ensuring adherence to security best practices.
4. Threat Hunting : Conduct proactive threat hunting exercises using EDR CTI and other cybersecurity tools to uncover hidden threats.
5. Threat Intelligence : Stay uptodate on the latest cybersecurity threats vulnerabilities and attack techniques and integrate threat intelligence into detection and response efforts.
6. Incident Reporting and Documentation : Ensure all incidents are thoroughly documented including timelines analysis mitigation steps and lessons learned and deliver regular reports to stakeholders.
7. Participation in an OOH OnCall Rota : 2 weeks in every 4 initially.

Growth of the service

1. Optimise Detection Rules : Enhance detection capabilities by finetuning rules and automating responses within our EDR and SIEM.
2. Continuous Improvement : Collaborate with the SOC Manager to develop and implement SOC strategies improve processes and introduce new technologies to strengthen security posture.
3. Collaboration : Collaborate with SOC analysts security engineers and IT teams to ensure seamless operation of security tools and alignment with broader cybersecurity practices.
4. Security Enhancements : Identify areas for improvement in security monitoring and response capabilities proposing and assist with implementing new solutions where appropriate.
5. Technology Management : Work with our technical team on the wider technology roadmap and with vendors to assess new tools and services and stay up to date on the latest capabilities.
6. Training and Mentoring Staff : Be a source of advice and knowledge to enhance the technical and professional skills of SOC team members.
7. Collaborating with Global Teams : Work closely with other cyber security teams to ensure seamless integration of SOC operations with our broader cybersecurity initiatives and business units especially Incident Response.
8. Contributing to Internal Technical Development Initiatives : When the schedule allows you will have opportunities to participate in and contribute to internal technical development initiatives enhancing our tools processes and overall incident response capabilities.

WHAT WERE LOOKING FOR

Candidates with the following qualifications and experience are likely to succeed in our Managed Services practice at SRM.

That said if you dont think you meet all of the criteria below but still are interested in the job please apply. Nobody checks every boxwere looking for candidates that are particularly strong in a few areas and have some interest and capabilities in others.

We nurture a culture of equality diversity and inclusion and we are dedicated to developing a workforce that displays a variety of talents experiences and perspectives.

Were looking for :

• Qualifications : A B achelor s or Masters degree in a relevant subject fo r example cybersecurity computer science ; relevant industry certifications are advantageous including any of the following : CISSP CISM GCFA GSOC GREM GCWN GCED CCNA OSCP Network and Security
• Experience : 3 years of experience in a SOC or cybersecurity operations role with demonstrated team leadership / supervisory experience .
• Technical Expertise : Strong understanding of EDR and Secops toolsets ideally SentinelOne and Microsoft Defender for Endpoint with experience configuring and leveraging these tools for incident detection and response .
• Incident Response : Proven ability to lead incident response efforts including point of entry malware analysis threat actor investigations and root cause analysis .
• Leadership : Experience mentoring junior SOC analysts with good communication and teambuilding skills .
• Approach : A n investigative mindset . You should be comfortable s olv ing problems with limited information and guidance.
• Threat intelligence : S ome demonstrable knowledge of cyber threat actors and their tactics techniques and procedures.
• Threat Detection : U nderstanding of security monitoring threat detection techniques and the ability to tune detection systems for optimal performance .
• Communication : Clear and concise communication skills with the ability to work effectively across teams; you should be able to communicate your technical findings for a nontechnical audience in a professional setting . Able to vet and quality assure incident reports and summaries .

The successful candidate must have permission to work in South Africa by the start of their employment.

To apply for this role please submit an uptodate CV through this link : Job Application for SOC Senior Analyst at SRM

Required Experience :

Senior IC

Key Skills

Splunk,IDS,Microsoft Access,SQL,Cybersecurity,Intelligence Experience,Malware Analysis,Tableau,Analysis Skills,SAS,Data Analysis Skills,Analytics