Senior SOC Analyst & Team Leader (Parktown, JHB)

About the role

We are looking for a seasoned Senior SOC Analyst to lead our Security Operations Centre in Parktown, Johannesburg. The role combines hands‑on incident response with team leadership, ensuring rapid detection, containment and remediation of advanced threats.

Key responsibilities

• Lead investigation and containment of high‑severity security incidents, performing forensic analysis and root‑cause determination.
• Mentor and guide junior analysts, fostering a culture of continuous learning and improvement.
• Conduct proactive threat hunting, vulnerability assessments and detection of malicious activity that evades traditional controls.
• Maintain, tune and optimise SIEM platforms such as Splunk, Microsoft Sentinel and QRadar to reduce false positives.
• Develop custom detection rules, use‑cases and automation scripts using Python or PowerShell.
• Collaborate with network, cloud and endpoint teams to ensure comprehensive security coverage.

Required profile

• 4–7 years of experience handling cyber‑security incidents and investigations.
• Strong understanding of Windows, Linux and macOS architectures and common vulnerabilities.
• Solid knowledge of network protocols, malware analysis and cloud security (AWS or Azure).
• Relevant certifications such as CompTIA Security+, CEH or EJPT.
• Matriculation with a focus on mathematics is preferred.

Required skills

• Windows, Linux, macOS operating systems
• Network protocol analysis
• Malware analysis
• Cloud platforms: AWS, Azure
• SIEM tools: Splunk, Microsoft Sentinel, QRadar
• Python scripting
• PowerShell scripting

What we offer

• Opportunity to lead a high‑performing SOC team in a dynamic consulting environment.
• Access to cutting‑edge security technologies and continuous professional development.