JOB 14 - Cyber Security SOC Analyst
Sasso Consulting · Johannesburg, Gauteng
Posted 9 October 2026
Stop applying one at a time.
JobAlertsZA auto-applies to South African jobs like this one for you, overnight. Upload your CV once — we do the applying.
Start free — we apply for you →Introduction
We are seeking 5 experienced Cyber Security SOC Analysts to join a specialist cybersecurity environment based in Centurion, Gauteng.
The successful candidates will monitor, detect, investigate and respond to cybersecurity threats across enterprise IT environments. This role requires strong hands-on experience in Security Operations Centre (SOC) operations, SIEM monitoring, threat detection and security incident investigation.
Duties & Responsibilities
Monitor security alerts across networks, servers, endpoints and cloud environments.
Investigate cybersecurity threats, suspicious activities and security incidents.
Analyse SIEM, EDR, XDR, firewall and network security logs.
Perform incident triage, classification, prioritisation and escalation.
Identify malware, phishing attacks, unauthorised access and compromised accounts.
Analyse indicators of compromise and emerging cyber threats.
Support threat hunting, incident response and containment activities.
Maintain accurate investigation records and incident reports.
Assist with SIEM detection rules, alert tuning and security monitoring improvements.
Collaborate with cybersecurity and infrastructure teams to strengthen security controls.
Desired Experience & Qualification
Relevant diploma or degree in IT, Computer Science, Cybersecurity or Information Security.
Minimum 3–5 years' practical experience in SOC operations, cybersecurity monitoring or incident investigation.
Proven hands-on experience within an enterprise Security Operations Centre.
Strong experience with SIEM platforms such as Microsoft Sentinel, Splunk, IBM QRadar, ArcSight or LogRhythm.
Experience with EDR/XDR technologies, including Microsoft Defender, CrowdStrike or SentinelOne.
Knowledge of Windows, Linux, Active Directory and enterprise networking.
Understanding of TCP/IP, DNS, firewalls, IDS/IPS and network security.
Familiarity with MITRE ATT&CK, threat intelligence and incident response procedures.
Cloud security monitoring experience advantageous.
Certifications such as CompTIA Security+, CySA+, SC-200, CEH or GIAC advantageous.
Important: Applicants must demonstrate practical SOC monitoring and security incident investigation experience. General IT support experience alone will not be considered.
Package & Remuneration
Market-related salary, dependent on experience and qualifications.
5 positions available.
Employment terms and benefits to be confirmed.
Employment type: 3 Year contract, hybrid
Interested?
Sasso Consulting
Jackie Sasso
Campbell Road, Craigavon, Fourways
2191 Johannesburg
http://sassoconsulting.co.za