{"id":4257401,"url":"https://alion.io/job/pronel-consultants-l2-soc-analyst","title":"L2 SOC Analyst","company":{"id":4497340,"name":"Pronel Consultants","domain":"pronel.co.za","url":"https://alion.io/company/pronel-consultants-2","size_band":null,"is_staffing_agency":true,"employer_type":"agency","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Johannesburg, South Africa"],"countries":["ZA"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"DLP","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"SIEM","optional":false},{"name":"ISO 27001","optional":true},{"name":"Microsoft Defender","optional":true},{"name":"PCI DSS","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true}],"status":"live","first_seen_at":"2026-11-13T14:04:15Z","employer_posted_date":null,"last_verified_at":"2026-11-13T14:04:15Z","board_verified":false,"closed_at":null,"days_open":0,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":0},"description":"An international organisation is looking for an experienced L2 SOC Analyst to join their security team and play a key role in protecting the company's systems, data, and people.\nThis is a hands-on role for someone who enjoys threat hunting, incident investigation, security automation, and continuous improvement. You'll work with a range of security technologies, help strengthen the company's security controls, and support the development of a proactive and effective SOC capability.\nWhat You'll Do\nPerform proactive threat hunting, monitoring, investigation, and incident response.\n\nInvestigate security alerts and incidents, conduct root cause analysis, and drive remediation.\n\nDevelop and maintain incident response playbooks and SOC procedures.\n\nAutomate repetitive SOC tasks, alerts, and reporting using scripting and security tooling.\n\nMonitor and improve our security technologies, including SIEM, EDR, endpoint, cloud, and DLP solutions.\n\nIdentify vulnerabilities and security risks and recommend effective mitigation strategies.\n\nSupport security audits, reporting, risk assessments, and compliance requirements.\n\nResearch emerging threats, vulnerabilities, and attack techniques.\n\nEvaluate and test new security products and technologies.\n\nHelp improve SOC processes, controls, and overall security maturity.\n\nMentor and support junior analysts.\n\nParticipate in an out-of-hours on-call rota when required.\n\nWhat You'll Bring\n3+ years' experience in a SOC environment and 5+ years in cybersecurity.\n\nStrong experience with SIEM, EDR, vulnerability management, threat hunting, and incident response.\n\nGood knowledge of the Microsoft Security stack, including Defender, Intune, Azure, and Entra ID.\n\nExperience with Microsoft Sentinel / Azure Sentinel is highly desirable.\n\nScripting experience with PowerShell, Python, and/or Regex.\n\nUnderstanding of security frameworks such as ISO 27001, NIST, CIS, or PCI DSS.\n\nExperience with endpoint protection, cloud security, DLP, CASB, and managed security services.\n\nStrong analytical, investigative, and problem-solving skills.\n\nExcellent communication skills, with the confidence to present security findings to senior and C-level stakeholders.\n\nA proactive mindset and genuine passion for cybersecurity and continuous learning.\n\nMicrosoft Sentinel – A cloud-native Security Information and Event Management (SIEM) and Security Orchestration, Automation and Response (SOAR) solution (Essential).\n\nKQL (Kusto Query Language) – Used to query large datasets across Azure and Microsoft security tools (Essential).\n\nMicrosoft Defender for Endpoint (MDE) – An enterprise endpoint security platform (Desirable).\n\nDesirable Certifications\nMicrosoft SC-200, SC-300, SC-400, AZ-500 or AZ-900.\n\nCompTIA Security+ or Network+.\n\nBTL1.\n\nMimecast or other relevant security/vendor certifications.\n\nWhy Join Our Client?\nThis is an opportunity to take a key role with this international client, working with modern cybersecurity technologies, hunting real-world threats, and making a tangible impact on the company's security posture. Apply now! Send CV's to ","description_format":"text","description_chars":3118,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Continuous learning"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response"],"lifecycle":[{"event":"open","at":"2026-11-13T14:04:15Z"}],"visa":[],"liveness":{"score":52,"band":"ok","label":"Likely open","p_open":1,"p_active":0.516,"p_room":1,"age_days":0,"expected_fill_days":26,"reasons":["seen:0","agency","win:early"],"computed_at":"2026-11-13T17:16:28Z"},"pay":null,"html_url":"https://alion.io/job/pronel-consultants-l2-soc-analyst","json_url":"https://alion.io/job/pronel-consultants-l2-soc-analyst.json","meta":{"generated_at":"2026-11-13T17:16:28Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":34561,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4497340},"rest":"https://alion.io/mcp/rest/get_company?id=4497340"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fpronel-consultants-l2-soc-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fpronel-consultants-l2-soc-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fpronel-consultants-l2-soc-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/pronel-consultants-l2-soc-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fpronel-consultants-l2-soc-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4257401}},{"tool":"search_jobs","arguments":{"company":"pronel.co.za","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4257401},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}