Security Analyst

SUMMARY:
We are looking for a proactive and detail-oriented Security /SOC/Cyber Security Analyst (L1/L2) to join our growing cybersecurity team. In this role, you will be responsible for protecting a Microsoft-centric cloud and enterprise environment, with a strong focus on threat detection, investigation, and response.
You will play a key role in monitoring security events, responding to incidents, improving the organisation’s security posture, and ensuring compliance across both cloud and on-prem environments.

POSITION INFO:
Key Responsibilities:
Security Monitoring & Incident Response

• Monitor, triage, and investigate security alerts using Microsoft Sentinel (SIEM/SOAR)
• Respond to incidents including malware, phishing, identity compromise, and data exfiltration
• Perform root cause analysis and produce detailed incident reports
• Develop and tune analytics rules, dashboards, and automation workflows

• Manage and operate Microsoft Defender (Endpoint, Identity, Cloud Apps, and Office 365)
• Investigate advanced threats using Defender XDR
• Improve detection accuracy and reduce false positives
• Collaborate with IT teams to remediate vulnerabilities

• Secure Azure workloads, identities, and networks
• Support Zero Trust security principles
• Implement and manage RBAC, Conditional Access, and MFA
• Analyse logs and telemetry across Azure environments

• Manage and monitor Fortinet solutions (FortiGate, FortiAnalyzer, FortiManager)
• Investigate network threats and suspicious traffic
• Support firewall rules, segmentation, VPNs, and IDS/IPS tuning
• Integrate network logs into Microsoft Sentinel

• Develop and maintain incident response playbooks
• Align playbooks with compliance standards and MITRE ATT&CK
• Continuously improve processes through testing and simulations
• Maintain clear and auditable documentation

• Support the full vulnerability lifecycle (discovery to remediation)
• Work with Microsoft Defender Vulnerability Management and other tools
• Track remediation progress and report on risk reduction
• Partner with technical teams to close security gaps

• Support Microsoft Purview (DLP, sensitivity labels, compliance reporting)
• Monitor and respond to DLP alerts
• Assist with compliance initiatives (POPIA, ISO 27001, GDPR)

• Contribute to security policies and standards
• Collaborate across infrastructure, cloud, and development teams
• Stay up to date with emerging threats and Microsoft security technologies

• Hands-on experience with Microsoft Sentinel
• Strong experience with Microsoft Defender suite
• Solid knowledge of Microsoft Azure (IAM, networking, security controls)
• Experience with Microsoft Purview
• Understanding of SIEM/SOAR, MITRE ATT&CK, IAM, and cloud security principles

• 3+ years in a Security Analyst / SOC / Cybersecurity role
• Experience securing Microsoft 365 and Azure environments
• Proven incident response and threat investigation experience

• CompTIA Security+, CISSP, or equivalent
• Microsoft SC-200 (Security Operations Analyst)
• Microsoft AZ-500 (Azure Security Engineer)
• Microsoft SC-400 (Information Protection Administrator)

• Work with cutting-edge Microsoft security technologies
• Be part of a collaborative and forward-thinking security team
• Opportunity to grow your cybersecurity career in a dynamic environment
• Exposure to enterprise-scale cloud and security operations