{"id":1464423,"url":"https://alion.io/job/sir-robert-mcalpine-ltd-soc-analyst","title":"SOC Analyst","company":{"id":687349,"name":"Sir Robert McAlpine Ltd","domain":"srm.com","url":"https://alion.io/company/srm-3","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"C","score":67,"open_postings":11,"ghost_share":0.545,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-15T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"junior","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Cape Town, South Africa"],"countries":["ZA"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":14500,"max_usd":42000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":528},"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Crowdstrike","optional":false},{"name":"Incident Management","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"SentinelOne","optional":false},{"name":"SIEM","optional":false},{"name":"Windows","optional":false},{"name":"Azure","optional":true}],"status":"live","first_seen_at":"2026-09-29T10:51:52Z","employer_posted_date":"2026-10-08","last_verified_at":"2026-10-15T06:26:57Z","board_verified":true,"closed_at":null,"days_open":15,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":15},"description":"WHO WE ARE \nS-RM is a global intelligence and cyber security consultancy. Since 2005, we’ve helped some of the most demanding clients in the world solve some of their toughest information security challenges. \nWe’ve been able to do this because of our outstanding people. We’re committed to developing sharp, curious, driven individuals who want to think critically, solve complex problems, and achieve success. \nBut we also know that work isn’t everything. It’s about the lives and careers it helps us build. We’re immensely proud of this culture and we invest in our people’s wellbeing, learning, and ideas every day. \nWe’re excited you’re thinking about joining us. \nWORKING IN CYBER AT S-RM \nOur Cyber Security division is the fastest-growing part of S-RM. The cyber sector is always evolving, and our Managed Services, Advisory, and Incident Response practices are in more demand than ever. \nWe’re building a team to meet this challenge. We’re quick to respond, innovate, and improve. We don’t get too hung up on hierarchy or bureaucracy. If your ideas are good enough, we’ll empower you to implement them. If you’re the best person to talk to a customer, you’ll get that opportunity, regardless of the title in your email signature. And when you need a hand, your team will always have your back. \nWe also don’t believe there’s a typical cyber security professional. We’ve built a team of intelligence analysts, technical specialists, software developers, investigators, risk managers, and more. You’ll always find a range of perspectives and expertise to help you learn and grow. \nIf that sounds like your kind of team, we’d like to hear from you. \nTHE ROLE \nAs a SOC Analyst you will deploy your cybersecurity expertise in a vital delivery role across our managed detection and response services. \nIn this role, you will use infrastructure and tools that power our Security Operations Centre (SOC) to deliver desired security outcomes for our managed services clients. The ideal candidate will have familiarity with security tools such as SIEM, SOAR, EDR, and other advanced technology. You will have a proven ability to respond effectively to security incidents. This hybrid role involves both remote work and some in-office presence for collaboration, teamwork and development. \nMonitor Security Events: Continuously monitor and analyse security alerts from EDR, SIEM and other security tools to detect suspicious activities or potential threats. \nIncident Response: Conduct investigations and respond to security incidents, executing containment, mitigation, and remediation steps as necessary. \n Threat Hunting: Proactively search for indicators of compromise (IoCs) and advanced threats within the environment, utilising both automated tools and manual analysis. \nThreat Detection: Use expertise to tune detection rules, automate workflows, and improve incident detection accuracy. \nLog Analysis: Perform in-depth log analysis from firewalls, endpoint protection platforms, and other solutions to investigate complex incidents. \nThreat Intelligence: Stay informed of emerging threats and collaborate with the threat intelligence team to enhance detection capabilities. \nIncident Reporting and Documentation: Ensure detailed documentation of incidents, responses, and resolutions to maintain a clear incident management process. \nShift Work: Participate in a 24/7 shift rotation to ensure continuous security monitoring, including evening, night, and weekend shifts. \nThe role will be based in ourCape Town office and is hybrid with a minimum of two days a week in office. \nWHAT WE ARE LOOKING FOR \nThe ideal candidate will have 2 to 3 years of experience working within a Security Operations Centre (SOC), with proven hands-on experience monitoring, investigating, and responding to security alerts and incidents. \nThey should be proficient in the use of XDR and SIEM platforms such as SentinelOne Singularity or Microsoft Sentinel, as well as Endpoint Detection and Response (EDR) solutions including SentinelOne, Microsoft Defender for Endpoint, or CrowdStrike. \nThe role requires experience in alert triage, event correlation, threat investigation, and incident escalation, supported by a solid understanding of common cyber threats, attack techniques, and security frameworks. \nCandidates should also have working knowledge of Windows and Linux operating systems, Active Directory, and Microsoft 365 security monitoring, together with experience maintaining incident records, investigation notes, and operational documentation. \nWe are looking for the following experience and qualifications: \nMinimum qualifications and experience \nBachelor’s degree in cyber security, Information Security, Computer Science, or related discipline. \nAdditional certifications such as: \nCompTIA CySA+ \nSC-100/SC-200 \nGIAC Certified Incident Handler (GCIH) \nCertified SOC Analyst (CSA) \nBlue Team / SOC Level 1 or 2 (CyberDefenders or THM) \nPreferred qualifications and experience \nExperience with Security Orchestration, Automation and Response (SOAR) platforms. \nExposure to cloud security monitoring, particularly Microsoft Azure and Microsoft 365. \nPrevious experience supporting managed security services (MSSP/MDR) environments or multiple clients \nExperience developing detection rules, SIEM use cases, and security playbooks. \nKnowledge of threat intelligence feeds and MITRE ATT&CK framework mapping. \nSuccessful candidates are also likely to show the following skills and competencies: \nStrong analytical and critical thinking skills \nAttention to detail and accuracy \nEffective decision-making under pressure \nStrong verbal and written communication skills \nAbility to work independently and within a team environment \nTime management and prioritisation skills \nContinuous learning mindset and adaptability \nCustomer service and stakeholder engagement skills \nProfessional integrity and confidentiality \nAbility to work shifts and participate in on-call rotations when required \nStrong organisational and investigative skills \nResilience and the ability to perform in a fast-paced operational environment \nThe successful candidate must have permission to work in South Africa by the start of their employment. \nOUR BENEFITS \nWe offer thoughtful, balanced rewards and support to help our people do their best work and live their lives outside it, this includes but is not exhaustive of: \nHoliday - 23 days per year increasing to 28 days (+1 day for every year you worked at S-RM, up to a maximum of 5 days) in addition to bank holidays \nGap Cover policy - allowing you to bridge the gap between your medical bills and your medical aid cover. \nLife insurance - 4x annual salary \nPrivate pension - up to 7% contribution matched by the company \nFormalised Recognition programme \nHybrid working and flexible working hours \nParental support: \nFertility treatment leave - 5 days of leave per cycle of treatment per year \nMaternity leave - 26 weeks of full pay followed by 13 weeks of half pay (after 1 year at the company on the “qualifying week” = 15 weeks before a due date) \nPaternity leave - 6 weeks of full pay (after 1 year at the company on the “qualifying week” = 15 weeks before a due date) \nVarious Health and Medical Benefits including: \nMedical aid with Discovery Health for employee, partner, and children up to the cost of the Classic Saver plan(taxable benefit) for you and your family; \n\nEAP (Employee Assistance Programme) for employees and immediate family, including counselling sessions \nFree access to the world-famous mindfulness app Headspace. \nSeasonal flu vaccination \nEye tests and glasses reimbursement up to certain cost on an annual basis \nTo apply for this role, please submit an up-to-date CV through this link: Job Application for SOC Analyst at S-RM","description_format":"text","description_chars":7785,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Continuous learning","Flexible schedule","Hybrid work","Life insurance"],"hiring_locations":[{"name":"South Africa","iso":"ZA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Transportation & Logistics","Civil & Structural Engineering","Security Operations"],"lifecycle":[{"event":"open","at":"2026-09-29T14:11:09Z"}],"visa":[],"liveness":{"score":51,"band":"ok","label":"Likely open","p_open":1,"p_active":0.564,"p_room":0.9,"age_days":15,"expected_fill_days":28,"reasons":["conf:3","stale_co","velocity","win:mid","comp:junior"],"computed_at":"2026-10-15T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/sir-robert-mcalpine-ltd-soc-analyst","json_url":"https://alion.io/job/sir-robert-mcalpine-ltd-soc-analyst.json","meta":{"generated_at":"2026-10-15T07:53:59Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":11925,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":687349},"rest":"https://alion.io/mcp/rest/get_company?id=687349"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsir-robert-mcalpine-ltd-soc-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsir-robert-mcalpine-ltd-soc-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsir-robert-mcalpine-ltd-soc-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/sir-robert-mcalpine-ltd-soc-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsir-robert-mcalpine-ltd-soc-analyst"}]}