What you will be doing:

• Lead our client’s 24/7 SOC team to make sure we’re monitoring security and responding to incidents effectively.
• Take charge of SIEM and other security platforms to manage and correlate logs effectively.
• Develop and improve SOC processes, playbooks, and response procedures to make things run smoother.
• Manage and improve threat intelligence, detection engineering, and response capabilities.
• Work with internal teams and external stakeholders to enhance security monitoring coverage.
• Set KPIs and SLAs for SOC performance, focusing on detection time, response time, and how well we’re mitigating threats.
• Make sure we’re compliant with security frameworks like NIST, MITRE ATT&CK, PCI DSS, GDPR, and POPIA.
• Recruit, mentor, and develop SOC analysts to build a high-performing security team.
• Be the go-to person for critical security incidents, leading response efforts and investigations.

What our client is looking for:

• A relevant tertiary degree would be beneficial (Cybersecurity, Computer Science, etc.)
• Relevant certifications would be highly beneficial – Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Global Information Assurance Certification (GIAC), etc.
• 5 – 10 years in operations, security monitoring, and incident response.
• 3+ years in a leadership role within a SOC.
• Strong knowledge of SIEM, EDR, SOAR, and firewall technologies.
• Expertise in security frameworks and regulations, including MITRE ATT&CK, NIST, ISO 27001, PCI DSS, GDPR, and POPIA.
• Hands-on experience with threat hunting, log analysis, and forensic investigations.
• Strong communication and leadership skills to effectively manage and motivate a team.