L3 SOC Analyst

Title:

Level 3 SOC Analyst

Location:

Cape Town, 5 days a week onsite

Work Hours:

Job type:
Full-Time Permanent

Salary:
Negotiable / DOE

Integrity
360 is a leading independent cybersecurity and PCI specialist operating across Europe, Africa, the Caribbean, and North America. The company has office locations in Ireland, the UK, Bulgaria, Italy, Sweden, Spain, Lithuania, Ukraine, Africa, the Caribbean, and Canada, supported by seven Security Operations Centres (SOCs) located in Dublin, Sofia, Madrid, Stockholm, Rome, Johannesburg and Cape Town.

With over 780 employees, including more than 585 dedicated cybersecurity professionals, Integrity
360 delivers a full suite of professional, support, and managed security services. These span the complete cyber risk lifecycle, from identification and prevention to detection, response, and recovery. Integrity
360 supports over 3000 mid-market and enterprise organisations across sectors including financial services, insurance, government, healthcare, retail, telecommunications, and utilities.

At Integrity
360, people come first. We invest heavily in learning, development and progression, fostering a dynamic culture where innovation, collaboration and continuous growth are at the heart of what we do. If you're ready to take your cyber security career to the next level, we'd love to hear from you.

In this role, you will act as a Level 3 escalation point within the MDR/SOC function, providing advanced technical support to Level 2 analysts during complex or high-severity investigations. You will be expected to bring deep operational knowledge across modern security technologies, including SIEM, EDR, Network Intrusion Detection Systems, SOAR, DLP and related security monitoring platforms.

The Principal SOC Analyst will support the investigation, containment and remediation of advanced threats, ensuring that incidents are analysed in the correct business and technical context. The role requires strong hands-on experience in security operations, incident response, threat analysis and detection tuning, as well as the ability to work directly with customers and internal stakeholders to improve detection capability and strengthen cyber security posture.

You will contribute to the continuous improvement of the MDR service by supporting the definition of security monitoring strategies, improving detection logic, tuning security technologies, reviewing investigation processes and advising customers on technical optimisation opportunities. A strong understanding of malware behaviour, adversary tactics, techniques and procedures, and emerging threats will be critical to success.

• Act as the Level 3 escalation point for advanced, complex or high-impact security investigations.
• Support Level 2 analysts during complex investigations, providing technical guidance, validation and direction.
• Perform in-depth analysis of security events, alerts, logs, endpoint telemetry, network traffic and other relevant data sources.
• Lead advanced incident investigations, including scoping, containment, eradication and remediation recommendations.
• Analyse malicious activity, suspicious files, attacker behaviour and adversary TTPs.
• Support customers from a technical perspective in the optimisation, tuning and improvement of their security monitoring capabilities.
• Review and improve SIEM, EDR, NIDS, SOAR and other security tool configurations to reduce false positives and improve detection quality.
• Contribute to the development and refinement of detection use cases, correlation rules, alerting logic and investigation playbooks.
• Support the definition of customer security monitoring strategies based on risk profile, threat landscape and available telemetry.
• Provide technical recommendations to strengthen customer cyber security posture and improve resilience against current and emerging threats.
• Conduct threat hunting and proactive analysis based on indicators, behaviours, intelligence and attack patterns.
• Document investigation findings, evidence, timelines, containment actions and remediation recommendations in a clear and structured manner.
• Prepare and deliver technical reports to customers, partners and internal stakeholders.
• Monitor trusted sources for emerging threats, vulnerabilities and adversary activity relevant to customer environments.
• Contribute to the continuous improvement of SOC processes, procedures, documentation and knowledge base material.
• Develop and maintain proficiency in Integrity
  360's MDR technologies, processes, and service offerings, applying this knowledge to improve customer outcome and service
• Support mentoring and technical development of Level 1 and Level 2 analysts, promoting best practices, investigative methodologies and operational excellence across the SOC.

• Strong hands-on experience in Security Operations Centre or MDR environments.
• Deep operational knowledge of SIEM, EDR, Network Intrusion Detection Systems, SOAR, DLP…