Skip to main content
Ouma Ngobeni

Ouma Ngobeni

SOC Analyst | Cybersecurity | Incident Response

Talent
johannesburgMember since June 29, 2026
Cortex XSOARZendeskIncident lifecycle managementSecurity sensorsMITRE ATT&CKPhishingMalwareBrute ForceLogin AnomaliesIncident ResponseShift HandoverSLA Compliance
·

Hire this person

Send a job offer directly to this candidate

Cortex XSOARZendeskIncident lifecycle managementSecurity sensorsMITRE ATT&CK

About

SOC Analyst L1 with 4+ years frontline experience in 24x7 SOC environments. Skilled in Cortex XSOAR-driven triage, Zendesk incident lifecycle management, and MITRE ATT&CK-based investigation of phishing, malware, brute force, and login anomaly alerts. Known for defensible documentation, SLA compliance, and maintaining operational continuity across shift handovers.

Shift lead - coordinating incident response, mentoring analysts, and ensuring the organization's security posture remains protected. Shift lead - training and equipping interns and L1s on more knowledge and processes of SOC operation and usage of tools to distinguish false positives as well as a structure for escalation.

Experience

SOC Analyst Level 1 at Cyberantix (2022-01 – Present)

  • Monitored XSOAR + SIEM alert queues 24/7, performed initial triage on high-volume alerts and prioritized by severity/business impact per SOC playbooks
  • Investigated Tier 1 incidents including phishing, malware, brute force, and login anomalies using MITRE ATT&CK framework, reduced false positive escalations through disciplined triage
  • Managed full incident lifecycle in Zendesk: created tickets with chain of custody, documented investigation notes + IOCs, and escalated to L2 with complete evidence packages ensuring defensibility
  • Produced structured SOC shift handover reports documenting unresolved risks, outstanding actions, and incident traceability to maintain operational continuity between shifts
  • Adhered to ISO-aligned SOC processes and governance standards, monitored health of customer security sensors, and surfaced process friction to improve operational consistency

Cybersecurity Intern at Altron Bytes People's Solution (2019-01 – 2020-12)

  • Conducted practical security testing and penetration testing on lab environments to understand attacker TTPs
  • Applied company security policies and protection protocols during vulnerability assessments and testing cycles

Systems Developer Intern at Absa Bank (2018-01 – 2019-12)

  • Supported Mainframe/Hogan production systems for credit/debit card issuing team, maintained batch file integrity and error-free scheduling
  • Extracted data from flat files and generated reports for business stakeholders using Easytrieve

Education

Bachelor of Science in Information Technology and Communication – PC Training and Business College (2010-01 – 2014-12)

Skills

SOC AnalystCybersecurityIncident Response

Reviews

Related