Lead Security Operations Center (SOC) Analyst (Remote)

About the Role

Our client is looking for an experienced Lead Security Operations Center (SOC) Analyst to spearhead their fully remote SOC operations. This leadership role is responsible for overseeing the detection, analysis, and response to cyber threats, ensuring the continuous monitoring of security systems and infrastructure. As a remote-first leader, you will guide a team of SOC analysts, mentor them on best practices, and drive operational excellence. You will be instrumental in developing and refining SOC processes, playbooks, and procedures to effectively mitigate security risks. This is a critical position requiring a deep understanding of threat landscapes, incident response methodologies, and security technologies. Your leadership will be vital in protecting our client's digital assets and maintaining a robust security posture from anywhere in the country.

Key Responsibilities

• Lead and manage a team of SOC Analysts, providing guidance and mentorship.
• Oversee the real-time monitoring of security alerts, events, and logs from various security tools.
• Analyze security incidents, determine their scope and impact, and coordinate response activities.
• Develop, refine, and execute SOC playbooks and standard operating procedures (SOPs).
• Manage and tune Security Information and Event Management (SIEM) systems and other SOC tools.
• Conduct threat hunting activities to proactively identify potential security breaches.
• Stay current with the latest threat intelligence, attack vectors, and cybersecurity trends.
• Report on SOC performance metrics, incident trends, and security posture to management.
• Ensure compliance with security policies and regulatory requirements.
• Facilitate post-incident reviews and implement lessons learned to improve defenses.
• Collaborate with other security teams, including incident response and vulnerability management.

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field.
• Minimum of 7 years of experience in cybersecurity operations, with at least 3 years in a lead or supervisory role within a SOC.
• Extensive experience with SIEM platforms, IDS/IPS, EDR, firewalls, and other security monitoring tools.
• Strong understanding of incident response methodologies, threat intelligence, and common attack frameworks (e.g., MITRE ATT&CK).
• Proficiency in analyzing security logs, network traffic, and system artifacts.
• Excellent leadership, communication, and problem-solving skills.
• Ability to manage and motivate a remote team effectively.
• Relevant certifications such as CISSP, CISM, GIAC certifications (e.g., GCIH, GCFA) are highly desirable.
• Experience with scripting (Python, PowerShell) for automation is a plus.
• Ability to work under pressure and make critical decisions during security incidents.

Benefits

• Our client offers a highly competitive salary, comprehensive health benefits, and performance bonuses.
• This role is fully remote, offering unparalleled flexibility and the ability to work from anywhere in South Africa.
• Our client provides significant opportunities for professional growth, including advanced training, certifications, and conference attendance.
• You will lead a talented team and play a crucial role in protecting the organization's digital assets.
• Our client fosters a collaborative, innovative, and supportive work environment that values employee contributions and promotes work-life balance.