An international organisation is looking for an experienced L2 SOC Analyst to join their security team and play a key role in protecting the company's systems, data, and people.

This is a hands-on role for someone who enjoys threat hunting, incident investigation, security automation, and continuous improvement. You'll work with a range of security technologies, help strengthen the company's security controls, and support the development of a proactive and effective SOC capability.

What You'll Do

• Perform proactive threat hunting, monitoring, investigation, and incident response.

• Investigate security alerts and incidents, conduct root cause analysis, and drive remediation.

• Develop and maintain incident response playbooks and SOC procedures.

• Automate repetitive SOC tasks, alerts, and reporting using scripting and security tooling.

• Monitor and improve our security technologies, including SIEM, EDR, endpoint, cloud, and DLP solutions.

• Identify vulnerabilities and security risks and recommend effective mitigation strategies.

• Support security audits, reporting, risk assessments, and compliance requirements.

• Research emerging threats, vulnerabilities, and attack techniques.

• Evaluate and test new security products and technologies.

• Help improve SOC processes, controls, and overall security maturity.

• Mentor and support junior analysts.

• Participate in an out-of-hours on-call rota when required.

What You'll Bring

• 3+ years' experience in a SOC environment and 5+ years in cybersecurity.

• Strong experience with SIEM, EDR, vulnerability management, threat hunting, and incident response.

• Good knowledge of the Microsoft Security stack, including Defender, Intune, Azure, and Entra ID.

• Experience with Microsoft Sentinel / Azure Sentinel is highly desirable.

• Scripting experience with PowerShell, Python, and/or Regex.

• Understanding of security frameworks such as ISO 27001, NIST, CIS, or PCI DSS.

• Experience with endpoint protection, cloud security, DLP, CASB, and managed security services.

• Strong analytical, investigative, and problem-solving skills.

• Excellent communication skills, with the confidence to present security findings to senior and C-level stakeholders.

• A proactive mindset and genuine passion for cybersecurity and continuous learning.

• Microsoft Sentinel – A cloud-native Security Information and Event Management (SIEM) and Security Orchestration, Automation and Response (SOAR) solution (Essential).

• KQL (Kusto Query Language) – Used to query large datasets across Azure and Microsoft security tools (Essential).

• Microsoft Defender for Endpoint (MDE) – An enterprise endpoint security platform (Desirable).

Desirable Certifications

• Microsoft SC-200, SC-300, SC-400, AZ-500 or AZ-900.

• CompTIA Security+ or Network+.

• BTL1.

• Mimecast or other relevant security/vendor certifications.

Why Join Our Client?

This is an opportunity to take a key role with this international client, working with modern cybersecurity technologies, hunting real-world threats, and making a tangible impact on the company's security posture. Apply now! Send CV's to recruit@pronel.co.za