Lead Security Operations Center (SOC) Analyst (Remote)

About the Role

Our client is seeking an experienced and dynamic Lead Security Operations Center (SOC) Analyst to spearhead their remote security monitoring efforts. This pivotal role is based in a fully remote capacity, empowering you to contribute your expertise from anywhere. You will be responsible for leading a team of SOC analysts, overseeing real-time threat detection, incident response, and continuous improvement of security operations. The ideal candidate possesses exceptional leadership qualities, a deep understanding of threat landscapes, and a proven ability to manage high-pressure situations within a virtual team structure. This position is integral to our client's commitment to maintaining a secure digital infrastructure and protecting against sophisticated cyber-attacks.

You will define and implement best practices for SOC operations, ensuring optimal performance and rapid response capabilities in a distributed work environment. Embrace this opportunity to shape the future of security operations for a leading organization.

Key Responsibilities

• Lead, mentor, and manage a team of SOC analysts in a remote setting.
• Oversee the continuous monitoring of security alerts, logs, and threat intelligence feeds.
• Direct and coordinate incident response activities, ensuring timely and effective resolution of security breaches.
• Develop and refine SOC playbooks, procedures, and workflows for efficiency and effectiveness.
• Analyze security incidents to determine root causes and implement preventative measures.
• Manage and optimize security tools and technologies within the SOC environment (SIEM, EDR, IDS/IPS).
• Conduct threat hunting exercises to proactively identify emerging threats.
• Report on SOC performance metrics, incident trends, and security posture to senior management.
• Stay current with the latest cyber threats, attack vectors, and defensive technologies.
• Champion a culture of continuous improvement within the SOC team.

Requirements

• Bachelor's degree in Computer Science, Cybersecurity, or a related field, or equivalent extensive experience.
• Minimum of 7 years of experience in SOC operations or incident response, with at least 2 years in a leadership role.
• Extensive experience with SIEM platforms (e.g., Splunk, QRadar, ELK Stack) and EDR solutions.
• Strong understanding of network protocols, operating systems, and common attack methodologies.
• Demonstrated ability to lead and manage a remote team effectively.
• Excellent analytical, communication, and decision-making skills under pressure.
• Experience with scripting languages (e.g., Python, PowerShell) for automation is a plus.
• Relevant certifications like GCIH, GCFA, CISSP are advantageous.
• Proven ability to manage complex security incidents.
• Demonstrated understanding of cloud security principles.

Benefits

• Our client offers a highly competitive compensation package, including an attractive base salary and performance-based bonuses.
• comprehensive health, dental, and vision insurance, a generous retirement savings plan, and ample paid time off.
• Professional development opportunities, including training and certifications, are actively supported.
• As a fully remote position, you will enjoy significant flexibility and the ability to work from your preferred location within George, Western Cape, ZA , or beyond.

Our client fosters a collaborative and inclusive virtual work environment, emphasizing employee well-being and career growth. This is an excellent opportunity to advance your career in security leadership and make a tangible impact on a global scale.