Soc Analyst Sandton - Sandton
N-tegrate Talent Solutions pty ltd
Our client is currently seeking a skilled and experienced SOC Analyst Level 2 to join their Security Operations Center (SOC) team. The SOC Analyst Level 2 will play a critical role in monitoring, analyzing, and responding to security incidents to protect our clients organizational assets and infrastructure from cyber threats. The ideal candidate will have a strong understanding of cybersecurity principles, experience with security tools and technologies, and the ability to work collaboratively in a fast-paced environment. Monitor security alerts and events using SIEM (Security Information and Event Management) tools and other security monitoring platforms. Analyze and investigate security incidents to determine the root cause and impact on the organization's systems and data. Conduct in-depth analysis of security logs, network traffic, and endpoint data to identify indicators of compromise (IOCs) and potential security breaches. Provide Tier 2 support for escalated security incidents and collaborate with Tier 3 analysts and incident response teams as needed. Develop and maintain standard operating procedures (SOPs) and response playbooks for common security incidents and events. Perform threat hunting activities to proactively identify and mitigate security threats and vulnerabilities. Participate in security incident response exercises and tabletop simulations to test and improve incident response procedures. Assist with security tool optimization, tuning, and configuration to enhance detection capabilities and reduce false positives. Stay up-to-date on the latest cybersecurity threats, vulnerabilities, and trends through research and continuous learning. Communicate effectively with internal stakeholders, including IT teams, management, and other business units, to provide updates on security incidents and recommendations for remediation. Bachelor's degree in Computer Science, Information Security, or related field, or equivalent work experience. 2-4 years of experience in a security operations role, preferably in a SOC environment. Strong understanding of cybersecurity principles, including threat intelligence, incident response, and security operations. Experience with SIEM platforms such as Darktrace,Splunk, QRadar, or ArcSight. Knowledge of common security technologies and tools, including IDS/IPS, firewalls, endpoint detection and response (EDR), and antivirus solutions. Familiarity with industry-standard security frameworks and regulations (e.g., NIST Cybersecurity Framework, GDPR, PCI DSS). Strong analytical and problem-solving skills with the ability to analyze complex security incidents and recommend appropriate actions. Excellent communication skills, both written and verbal, with the ability to effectively communicate technical information to non-technical stakeholders. Relevant certifications such as CompTIA Security, GIAC Certified Incident Handler (GCIH), or Certified Information Systems Security Professional (CISSP) are a plus.
Apply Now
Facebook
WhatsappRelated Jobs
Cyber Security Engineer Johannesburg - Johannesburg
iLaunch Ltd
...
Cyber Security Engineer Johannesburg - Johannesburg
TalenCo Recruitment Specialists
...
Junior Coordinator Sandton - Sandton
N-tegrate Talent Solutions pty ltd
...
Safety Engineer Johannesburg - Johannesburg
Paracon - Gauteng
...
Cyber Safety & Security Engineer - Johannesburg
Paracon - Gauteng
...