Security Analyst

SUMMARY:
We are looking for a proactive and detail-oriented Security/SOC/Cybersecurity Analyst (L1/L2) to join our growing cybersecurity team. In this role, you will be responsible for protecting a Microsoft-centric cloud and enterprise environment, with a strong focus on threat detection, investigation, and response.

POSITION INFO:
You will play a key role in monitoring security events, responding to incidents, improving the organisation’s security posture, and ensuring compliance across both cloud and on-prem environments.

Key Responsibilities:

• Security Monitoring & Incident Response:
  • Monitor, triage, and investigate security alerts using Microsoft Sentinel (SIEM/SOAR)
  • Respond to incidents, including malware, phishing, identity compromise, and data exfiltration
  • Perform root cause analysis and produce detailed incident reports
  • Develop and tune analytics rules, dashboards, and automation workflows
• Microsoft Defender Security Operations:
  • Manage and operate Microsoft Defender (Endpoint, Identity, Cloud Apps, and Office 365)
  • Investigate advanced threats using Defender XDR
  • Improve detection accuracy and reduce false positives
  • Collaborate with IT teams to remediate vulnerabilities
• Cloud & Identity Security (Azure):
  • Secure Azure workloads, identities, and networks
  • Support Zero Trust security principles
  • Implement and manage RBAC, conditional access, and MFA
  • Analyse logs and telemetry across Azure environments
• Network Security:
  • Manage and monitor Fortinet solutions (FortiGate, FortiAnalyzer, and FortiManager)
  • Investigate network threats and suspicious traffic
  • Support firewall rules, segmentation, VPNs, and IDS/IPS tuning
  • Integrate network logs into Microsoft Sentinel
• Security Playbooks & Automation:
  • Develop and maintain incident response playbooks
  • Align playbooks with compliance standards and MITRE ATT&CK
  • Continuously improve processes through testing and simulations
  • Maintain clear and auditable documentation
• Vulnerability Management:
  • Support the full vulnerability lifecycle (discovery to remediation)
  • Work with Microsoft Defender Vulnerability Management and other tools
  • Track remediation progress and report on risk reduction
  • Partner with technical teams to close security gaps
• Data Protection & Compliance:
  • Support Microsoft Purview (DLP, sensitivity labels, and compliance reporting)
  • Monitor and respond to DLP alerts
  • Assist with compliance initiatives (POPIA, ISO 27001, and GDPR)
• Continuous Improvement:
  • Contribute to security policies and standards
  • Collaborate across infrastructure, cloud, and development teams
  • Stay up to date with emerging threats and Microsoft security technologies

• Technical Skills (Essential):
  • Hands-on experience with Microsoft Sentinel
  • Strong experience with Microsoft Defender suite
  • Solid knowledge of Microsoft Azure (IAM, networking, and security controls)
  • Experience with Microsoft Purview
  • Understanding of SIEM/SOAR, MITRE ATT&CK, IAM, and cloud security principles
• Experience:
  • 3+ years in a Security Analyst / SOC / Cybersecurity role
  • Experience securing Microsoft 365 and Azure environments
  • Proven incident response and threat investigation experience
• Certifications (Advantageous):
  • CompTIA Security+, CISSP, or equivalent
  • Microsoft SC-200 (Security Operations Analyst)
  • Microsoft AZ-500 (Azure Security Engineer)
  • Microsoft SC-400 (Information Protection Administrator)

• Work with cutting-edge Microsoft security technologies
• Be part of a collaborative and forward-thinking security team
• Opportunity to grow your cybersecurity career in a dynamic environment
• Exposure to enterprise-scale cloud and security operations