Description
SOC Engineer, South Africa (Hybrid)
WHO WE ARE
S-RM is a global intelligence and cyber security consultancy. Since 2005, we’ve helped some of the most demanding clients in the world solve some of their toughest information security challenges.
We’ve been able to do this because of our outstanding people. We’re committed to developing sharp, curious, driven individuals who want to think critically, solve complex problems, and achieve success.
But we also know that work isn’t everything. It’s about the lives and careers it helps us build. We’re immensely proud of this culture and we invest in our people’s wellbeing, learning, and ideas every day.
We’re excited you’re thinking about joining us.
WORKING IN CYBER AT S-RM
Our Cyber Security division is the fastest-growing part of S-RM. The cyber sector is always evolving, and our Advisory, Managed Services, and Incident Response practices are in more demand than ever.
We’re building a team to meet this challenge. We’re quick to respond, innovate, and improve. We don’t get too hung up on hierarchy or bureaucracy. If your ideas are good enough, we’ll empower you to implement them. If you’re the best person to talk to a customer, you’ll get that opportunity, regardless of the title in your email signature. And when you need a hand, your team will always have your back.
We also don’t believe there’s a typical cyber security professional. We’ve built a team of intelligence analysts, technical specialists, software developers, investigators, risk managers, and more. You’ll always find a range of perspectives and expertise to help you learn and grow.
If that sounds like your kind of team, we’d like to hear from you.
THE ROLE
As SOC Engineer, you will drive the technical onboarding of MSSP customers and ensure comprehensive security monitoring coverage through log ingestion and detection engineering. The ideal candidate will have strong expertise in SIEM administration, log source integration, and detection rule development. Additionally, having experience with customer-facing technical roles, data parsing and normalization, and threat detection frameworks such as MITRE ATT&CK, will get you ahead.
Key Responsibilities
- Customer Onboarding & Integration: You will lead the technical onboarding of new MSSP customers, including scoping log sources, deploying collection infrastructure and validating end-to-end data flow. This includes managing onboarding timelines, coordinating with customer IT teams, and ensuring a smooth transition into active monitoring.
- Log Ingestion & Data Engineering: You will implement log ingestion pipelines, including parsing, normalization, and enrichment of diverse log sources. This includes troubleshooting ingestion failures, managing data quality, and optimizing volume and retention across a multi-tenant architecture.
- Detection Engineering: You will develop, tune, and maintain detection logic aligned to customer environments and threat landscapes. This includes reducing false positive rates and improving detection fidelity based on analyst feedback and emerging threats.
- Documentation & Standardization: You will create and maintain runbooks, integration guides, and onboarding playbooks to ensure consistent, repeatable delivery across customer engagements. You will define and refine standards for log source coverage, parsing schemas, and detection rule lifecycle management.
- Collaboration & Support: You will work closely with SOC analysts, platform engineers, threat intelligence teams, and client success managers to understand customer requirements and deliver monitoring solutions that maximize detection coverage. You will provide technical support and troubleshooting for ingestion and detection-related issues.
- Contributing to Internal Technical Development Initiatives: When the schedule allows, you will have opportunities to participate in and contribute to internal technical development initiatives.
WHAT WE’RE LOOKING FOR
Candidates with the following qualifications and experience are likely to succeed in our Managed Services practice at S-RM.
That said, if you don’t think you meet all of the criteria below but still are interested in the job, please apply. Nobody checks every box—we’re looking for candidates that are particularly strong in a few areas and have some interest and capabilities in others.
We nurture a culture of equality, diversity and inclusion and we are dedicated to developing a workforce that displays a variety of talents, experiences and perspectives.
We’re looking for:
- Qualifications
- Education: A Bachelor's or Master's degree in a relevant subject (e.g., computer science, software engineering, systems administration, or cybersecurity), or equivalent practical experience. Relevant industry certifications are advantageous
Similar jobs
SOC Engineer, Kuala Lumpur, (Hybrid) WHO WE ARE S-RM is a global intelligence and cyber security consultancy. Since 2005, we’ve helped some of the most demanding clients in the world solve some of their toughest informat…
Welcome to the future of cloud networking and security! Cato Networks is the first company to converge enterprise networking and security into one centralized and global service that is delivered by cloud. It is led by n…
Est. 120,000 USD
CHAOS Industries is redefining modern defense with a multi-product portfolio that gives the ultimate advantage—domain dominance. The company's products are powered by Coherent Distributed Networks (CDN™), empowering warf…
S-RM is recruiting a Senior DevOps Engineer to play a key role in the development and maintenance of products for our Corporate Intelligence team.
Est. 120,000 USD
Most companies claim to have the best people. We say to them, "Keep dreaming." Our people are second to none. They set us apart with their entrepreneurial spirit and ambition. They come to us from the likes of Amazon, Mi…
The Government Technology Agency (GovTech) is the lead agency driving Singapore’s Smart Nation initiatives and public sector digital transformation. As the Centre of Excellence for Infocomm Technology and Smart Systems (…
Truveta provides unprecedented real-world data and real-time intelligence, powered by a dataset built with and owned by US health systems united in a mission of Saving Lives with Data. Together, we power breakthrough med…
Est. 140,000 USD
Madison Square Garden Entertainment Corp. (MSG Entertainment) is a leader in live entertainment, delivering unforgettable experiences while forging deep connections with diverse and passionate audiences. The Company’s po…
Est. 65,000 GBP
CHAOS Industries is redefining modern defense with a multi-product portfolio that gives the ultimate advantage—domain dominance. The company's products are powered by Coherent Distributed Networks (CDN™), empowering warf…
About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to…
Est. 120,000 USD
About Yondr Yondr is a disruptor. We challenge convention and simplify complexity. A global developer, owner operator and service provider of data centers, we deliver complex data center capacity needs for the world’s la…
OPSWAT, a global leader in IT, OT, and ICS critical infrastructure cybersecurity, delivers an end-to-end platform that gives public and private sector organizations and enterprises the critical advantage needed to protec…
Why Valtech? We’re the experience innovation company - a trusted partner to the world’s most recognized brands. To our people we offer growth opportunities, a values-driven culture, international careers and the chance t…
Truveta provides unprecedented real-world data and real-time intelligence, powered by a dataset built with and owned by US health systems united in a mission of Saving Lives with Data. Together, we power breakthrough med…
SENIOR CYBERSECURITY CONSULTANT (SOC), KUALA LUMPUR WHO WE ARE S-RM is a global intelligence and cyber security consultancy. Since 2005, we’ve helped some of the most demanding clients in the world solve some of their to…
Welcome to the future of cloud networking and security! Cato Networks is the first company to converge enterprise networking and security into one centralized and global service that is delivered by cloud. It is led by n…
Est. 60,000 USD
Overview *Location: Remote (Candidates based in Virginia or North Carolina are preferred)
Est. 80,000 EUR
At Cision, we believe in empowering every individual to make an impact. Here, your voice is heard, your ideas are valued, and your unique perspective fuels our collective success. As part of our global team, you'll thriv…
Est. 250,000 USD
Title: Chief Information Security Officer (CISO) Location: Morristown, NJ / Austin, TX(hybrid) Reports To: Chief Technology Officer About Hippo: Hippo was built on a promise: make homeownership effortless. Nearly a decad…
Est. 80,000 GBP
Welcome to the future of cloud networking and security! Cato Networks is the first company to converge enterprise networking and security into one centralized and global service that is delivered by cloud. It is led by n…
Truveta provides unprecedented real-world data and real-time intelligence, powered by a dataset built with and owned by US health systems united in a mission of Saving Lives with Data. Together, we power breakthrough med…
Est. 250,000 USD
Title: Chief Information Security Officer (CISO) Location: Austin, TX / Morristown, NJ (hybrid) Reports To: Chief Technology Officer About Hippo: Hippo was built on a promise: make homeownership effortless. Nearly a deca…
Est. 840,000 SEK
Vectra® is the leader in AI-driven threat detection and response for hybrid and multi-cloud enterprises. The Vectra AI Platform delivers integrated signal across public cloud, SaaS, identity, and data center networks in…
Est. 144,000 USD
CHAOS Industries is redefining modern defense with a multi-product portfolio that gives the ultimate advantage—domain dominance. The company's products are powered by Coherent Distributed Networks (CDN™), empowering warf…
Truveta provides unprecedented real-world data and real-time intelligence, powered by a dataset built with and owned by US health systems united in a mission of Saving Lives with Data. Together, we power breakthrough med…
Est. 144,000 USD
CHAOS Industries is redefining modern defense with a multi-product portfolio that gives the ultimate advantage—domain dominance. The company's products are powered by Coherent Distributed Networks (CDN™), empowering warf…
Est. 144,000 USD
CHAOS Industries is redefining modern defense with a multi-product portfolio that gives the ultimate advantage—domain dominance. The company's products are powered by Coherent Distributed Networks (CDN™), empowering warf…
Est. 840,000 SEK
About Keyfactor Our mission is to securely connect the world: humans, machines, and AI. Keyfactor is the leader in trust infrastructure for AI and machines, helping the world's largest enterprises and government agencies…
Est. 120,000 PLN
Welcome to the future of cloud networking and security! Cato Networks is the first company to converge enterprise networking and security into one centralized and global service that is delivered by cloud. It is led by n…
Black Duck Software, Inc. helps organizations build secure, high-quality software, minimizing risks while maximizing speed and productivity. Black Duck, a recognized pioneer in application security, provides SAST, SCA, a…