Senior Security Analyst

SUMMARY:
Description:
Security operations and monitoring:

• Monitor security events across infrastructure, cloud platforms, endpoints, networks and applications.
• Investigate security alerts and incidents.
• Perform threat hunting and root cause analysis.
• Maintain and enhance SIEM and security monitoring capabilities.
• Coordinate incident response activities and post-incident reviews.
• Develop and maintain security playbooks and response procedures.

• Manage vulnerability scanning programmes.
• Analyse vulnerability assessment results.
• Coordinate remediation efforts with ICT teams.
• Validate remediation activities.
• Produce regular vulnerability and risk reports.
• Establish risk-based prioritisation of vulnerabilities

• Design and implement security controls across Microsoft 365, Azure, Active Directory / Entra ID, Linux and Windows servers, network infrastructure and DevOps platforms.
• Implement and maintain multi-factor authentication, Privileged Access Management, Endpoint Detection and Response, Data Loss Prevention and security automation solutions.
• Evaluate and implement new security technologies.

• Secure Azure cloud environments.
• Review cloud configurations and architecture.
• Conduct cloud security assessments.
• Implement Microsoft security best practices.
• Support Zero Trust initiatives.

• Maintain cybersecurity risk registers.
• Conduct risk assessments.
• Support internal and external audits.
• Assist with policy and standard development.
• Support compliance requirements including POPIA, CIS Controls, and regulatory and client requirements.

• Review and approve security designs.
• Assess new solutions and projects for security risks.
• Define security standards and baselines with Team Lead and Line Manager.
• Develop secure architecture patterns with Team Lead.

• Promote security awareness initiatives.
• Conduct security training.
• Guide technical and business teams.
• Support organisational cyber resilience programmes.

• Support secure software development practices.
• Review security testing and code scanning.
• Assist development teams with remediation activities.

• Matric with 10 years' work experience/or a bachelor’s degree or National Diploma in Information Security, Computer Science, Information Technology, Engineering or analytical related field.

• CISSP
• CISM
• CompTIA Security+
• Microsoft Security certifications
• Microsoft Azure Security Engineer Associate (AZ-500)

• Seven or more years of ICT experience.
• Five or more years of cybersecurity experience.
• Experience managing enterprise security technologies.
• Experience in incident response and threat investigation.
• Experience with vulnerability management programmes.
• Experience securing cloud platforms.
• Experience working within regulated environments.

• Experience with the Microsoft security stack.
• Experience with DevSecOps practices.
• Experience with SIEM and SOAR platforms.
• Experience with Zero Trust architecture.

• Microsoft Defender suite, Zabbix, Vulnerability management tools, Privileged Access Management solutions, Email security platforms, Data Loss Prevention solutions, Identity Access Management, Endpoint Management, Certificate Authority.

• Azure, Microsoft 365, Active Directory, Entra ID, Windows Server, Linux, VMware.

• TCP/IP, Firewalls, IDS/IPS, VPN technologies, Network segmentation, ZTNA technologies (Netskope).

• PowerShell, Python, Bash, REST APIs, Security automation.

• Analytical thinking
• Problem solving
• Risk-based decision-making
• Attention to detail
• Accountability
• Communication skills
• Stakeholder management
• Teamwork and collaboration
• Customer focus
• Continuous learning
• Integrity and professionalism

• Reduction in critical vulnerabilities.
• Incident response service-level adherence.
• Security control effectiveness.
• Completion of risk assessments.
• Audit finding remediation rate.
• Security awareness participation rates.
• Compliance maturity improvements.
• Security monitoring coverage.

POSITION INFO:
Description: Security operations and monitoring: Monitor security events across infrastructure, cloud platforms, endpoints, networks and applications. Investigate security alerts and incidents. Perform threat hunting and root cause analysis. Maintain and enhance SIEM and security monitoring capabilities. Coordinate incident response activities and post-incident reviews. Develop and maintain security playbooks and response procedures. Vulnerability management: Manage vulnerability scanning programmes. Analyse vulnerability assessment results. Coordinate remediation efforts with ICT teams. Validate remediation activities. Produce regular vulnerability and risk reports. Establish risk-based prioritisation of vulnerabilities Security engineering: Design and implement security controls across Microsoft 365, Azure, Active Directory \/ Entra ID, Linux and Windows servers, network infrastructure and DevOps platforms. Implement and maintain multi-factor authentication, Privileged Access Management, Endpoint Detection and Response, Data Loss Prevention and security automation solutions. Evaluate and implement new security technologies. Cloud security: Secure Azure cloud environments. Review cloud configurations and architecture. Conduct cloud security assessments. Implement Microsoft security best practices. Support Zero Trust initiatives. Governance, risk and compliance: Maintain cybersecurity risk registers. Conduct risk assessments. Support internal and external audits. Assist with policy and standard development. Support compliance requirements including POPIA, CIS Controls, and regulatory and client requirements. Security architecture: Review and approve security designs. Assess new solutions and projects for security risks. Define security standards and baselines with Team Lead and Line Manager. Develop secure architecture patterns with Team Lead. Security awareness: Promote security awareness initiatives. Conduct security training. Guide technical and business teams. Support organisational cyber resilience programmes. DevSecOps: Support secure software development practices. Review security testing and code scanning. Assist development teams with remediation activities. Qualifications Minimum Matric with 10 years' work experience\/or a bachelor's degree or National Diploma in Information Security, Computer Science, Information Technology, Engineering or analytical related field. Preferred certifications: CISSP CISM CompTIA Security+ Microsoft Security certifications Microsoft Azure Security Engineer Associate (AZ-500) Experience: Required: Seven or more years of ICT experience. Five or more years of cybersecurity experience. Experience managing enterprise security technologies. Experience in incident response and threat investigation. Experience with vulnerability management programmes. Experience securing cloud platforms. Experience working within regulated environments. Preferred: Experience with the Microsoft security stack. Experience with DevSecOps practices. Experience with SIEM and SOAR platforms. Experience with Zero Trust architecture. Technical skills: Security technologies: Microsoft Defender suite, Zabbix, Vulnerability management tools, Privileged Access Management solutions, Email security platforms, Data Loss Prevention solutions, Identity Access Management, Endpoint Management, Certificate Authority. Infrastructure: Azure, Microsoft 365, Active Directory, Entra ID, Windows Server, Linux, VMware. Networking: TCP\/IP, Firewalls, IDS\/IPS, VPN technologies, Network segmentation, ZTNA technologies (Netskope). Automation and scripting: PowerShell, Python, Bash, REST APIs, Security automation. Behavioural competencies : Analytical thinking Problem solving Risk-based decision-making Attention to detail Accountability Communication skills Stakeholder management Teamwork and collaboration Customer focus Continuous learning Integrity and professionalism Key performance indicators: Reduction in critical vulnerabilities. Incident response service-level adherence. Security control effectiveness. Completion of risk assessments. Audit finding remediation rate. Security awareness participation rates. Compliance maturity improvements. Security monitoring coverage.