Join an innovative and fast-growing cyber security consultancy as a SOC Engineer (L2), delivering managed security services to clients across South Africa, the UK and the UAE.

This isn't a traditional "alert monitoring" SOC role.

You'll join a modern Microsoft-focused security practice where SOC Engineers are encouraged to go beyond incident response and actively contribute to improving clients' security posture. You'll be involved in threat detection engineering, security automation, investigation of sophisticated threats, tuning security tools, developing operational playbooks, and helping shape security outcomes for a diverse client base.

Working across Microsoft Sentinel, Defender XDR and the broader Microsoft Security stack, you'll gain exposure to complex client environments while collaborating with experienced security professionals locally and internationally.

This opportunity is ideal for someone who enjoys understanding how security platforms work under the hood, solving complex security challenges and continuously developing their engineering, threat detection and incident response capabilities.

• Investigating and responding to security alerts and incidents across multiple client environments.
• Designing, improving and tuning security detections within Microsoft Sentinel and Defender.
• Conducting proactive threat hunting and security investigations using KQL.
• Developing and enhancing automation, Logic Apps, playbooks and operational workflows.
• Performing containment, remediation and recovery activities during security incidents.
• Identifying trends, gaps and opportunities to improve detection coverage and reduce false positives.
• Assisting with the onboarding and integration of new security technologies and client environments.
• Contributing to security engineering initiatives, reporting frameworks and service improvements.
• Collaborating directly with clients and internal teams to strengthen security operations and outcomes.