JOB 16 - Cyber Security SOC Engineer

Sasso Consulting · Johannesburg, Gauteng

Posted 9 October 2026

Stop applying one at a time.

JobAlertsZA auto-applies to South African jobs like this one for you, overnight. Upload your CV once — we do the applying.

Start free — we apply for you →

Introduction

We are recruiting 5 experienced Cyber Security SOC Engineers to design, implement, maintain and optimise enterprise security monitoring infrastructure.

The successful candidates must have strong hands-on experience with SIEM platforms, threat detection engineering, EDR/XDR technologies and security automation.

Duties & Responsibilities

Design, implement and maintain enterprise SOC infrastructure.

Deploy, configure and administer SIEM platforms such as Microsoft Sentinel, Splunk, QRadar or Elastic Security.

Develop security detection rules, correlation searches and monitoring dashboards.

Integrate security logs from servers, endpoints, networks and cloud environments.

Configure and maintain EDR/XDR security solutions.

Develop SOAR automation workflows and incident response playbooks.

Monitor and optimise SOC platform performance, availability and security.

Troubleshoot security tool integrations and log ingestion issues.

Improve threat detection capabilities using MITRE ATT&CK.

Support security monitoring across Azure, AWS and hybrid environments.

Desired Experience & Qualification

Relevant IT, Computer Science, Cybersecurity or Information Security qualification.

3–5 years' hands-on SOC engineering or SIEM engineering experience.

Proven experience implementing and administering enterprise SIEM platforms.

Strong knowledge of detection engineering, log management and security monitoring architecture.

Practical experience with EDR/XDR technologies and SOAR automation.

Scripting experience with Python, PowerShell, KQL or SPL.

Knowledge of Windows Server, Linux, Active Directory and networking.

Familiarity with cloud security monitoring and MITRE ATT&CK.

Relevant certifications such as SC-200, Security+, CySA+, Splunk or QRadar advantageous.

Important: Candidates must demonstrate practical SOC engineering experience. SOC Analyst experience alone, without substantial security platform engineering responsibilities, will not be sufficient.

Package & Remuneration

Market-related salary, dependent on experience and qualifications.

5 positions available.

Employment terms and benefits to be confirmed.

Employment type: 3 Year contract, hybrid

Interested?

Sasso Consulting

Jackie Sasso

Campbell Road, Craigavon, Fourways

2191 Johannesburg

http://sassoconsulting.co.za

Auto-apply to this jobView original posting ↗