SOC Analyst

We have a new and exciting SOC Analyst role available within our Cyber Security division in Cape Town.

S-RM is a global intelligence and cyber security consultancy. Since 2005, we’ve helped some of the most demanding clients in the world solve some of their toughest information security challenges.

We’ve been able to do this because of our outstanding people. We’re committed to developing sharp, curious, driven individuals who want to think critically, solve complex problems, and achieve success.

But we also know that work isn’t everything. It’s about the lives and careers it helps us build. We’re immensely proud of this culture and we invest in our people’s wellbeing, learning, and ideas every day.

We’re excited you’re thinking about joining us.

Our Cyber Security division is the fastest-growing part of S-RM. The cyber sector is always evolving, and our Managed Services, Advisory, and Incident Response practices are in more demand than ever.

We’re building a team to meet this challenge. We’re quick to respond, innovate, and improve. We don’t get too hung up on hierarchy or bureaucracy. If your ideas are good enough, we’ll empower you to implement them. If you’re the best person to talk to a customer, you’ll get that opportunity, regardless of the title in your email signature. And when you need a hand, your team will always have your back.

We also don’t believe there’s a typical cyber security professional. We’ve built a team of intelligence analysts, technical specialists, software developers, investigators, risk managers, and more. You’ll always find a range of perspectives and expertise to help you learn and grow.

If that sounds like your kind of team, we’d like to hear from you.

As a SOC Analyst you will deploy your cybersecurity expertise in a vital delivery role across our managed detection and response services.

In this role, you will use infrastructure and tools that power our Security Operations Centre (SOC) to deliver desired security outcomes for our managed services clients. The ideal candidate will have familiarity with security tools such as SIEM, SOAR, EDR, and other advanced technology. You will have a proven ability to respond effectively to security incidents. This hybrid role involves both remote work and some in-office presence for collaboration, teamwork and development.

• Monitor Security Events:
  Continuously monitor and analyse security alerts from EDR, SIEM and other security tools to detect suspicious activities or potential threats.
• Incident Response:
  Conduct investigations and respond to security incidents, executing containment, mitigation, and remediation steps as necessary.
• Threat Hunting:
  Proactively search for indicators of compromise (IoCs) and advanced threats within the environment, utilising both automated tools and manual analysis.
• Threat Detection:
  Use expertise to tune detection rules, automate workflows, and improve incident detection accuracy.
• Log Analysis:
  Perform in-depth log analysis from firewalls, endpoint protection platforms, and other solutions to investigate complex incidents.
• Threat Intelligence:
  Stay informed of emerging threats and collaborate with the threat intelligence team to enhance detection capabilities.
• Incident Reporting and Documentation:
  Ensure detailed documentation of incidents, responses, and resolutions to maintain a clear incident management process.
• Shift Work:
  Participate in a 24/7 shift rotation to ensure continuous security monitoring, including evening, night, and weekend shifts.

The role will be based in our Cape Town office and is hybrid with a minimum of two days a week in office.

The ideal candidate will have 2 to 3 years of experience working within…