About the position
Cape Town is calling… and no, this isn’t another job where “cybersecurity” means resetting passwords.
We’re looking for an experienced Senior Security Analyst to join a high-performing technology environment and take ownership across Security Operations, Cloud Security, Vulnerability Management, Security Engineering, GRC and DevSecOps.
If you know your Microsoft Defender from your Microsoft Teams, can investigate a real security incident, and understand that “Zero Trust” is more than a buzzword, this one’s for you.
What you’ll be doing
Security Operations
- Monitor and investigate security events across cloud, endpoints, networks and applications.
- Perform threat hunting, incident response and root-cause analysis.
- Enhance SIEM capabilities, playbooks and security monitoring.
Vulnerability Management
- Manage vulnerability scanning and risk-based prioritization.
- Coordinate remediation with ICT teams and validate fixes.
- Produce vulnerability and risk reporting.
Security Engineering & Cloud
- Design and implement security controls across Azure, Microsoft 365, Entra ID, Windows, Linux and DevOps.
- Implement MFA, PAM, EDR, DLP and security automation.
- Secure Azure environments, conduct cloud assessments and support Zero Trust initiatives.
GRC & Security Architecture
- Conduct cybersecurity risk assessments and maintain risk registers.
- Support audits, policies and compliance requirements including POPIA and CIS Controls.
- Review security designs and define secure architecture standards and baselines.
DevSecOps & Awareness
- Support secure development, code scanning and security testing.
- Help development teams remediate security vulnerabilities.
- Drive security awareness, training and organizational cyber resilience.
What you’ll need
- 7+ years ICT experience, including 5+ years in cybersecurity.
- Strong enterprise security technology experience.
- Proven experience in incident response, threat investigation and vulnerability management.
- Strong Azure, Microsoft 365, Entra ID and Active Directory experience.
- Experience securing cloud platforms and working in regulated environments.
- Strong knowledge of firewalls, IDS/IPS, VPN, segmentation and ZTNA.
- Scripting and automation skills using PowerShell, Python, Bash and REST APIs.
- Experience with Microsoft Defender, PAM, EDR, DLP, vulnerability management and security monitoring tools.
Qualifications & certifications
- Minimum: Matric
- A relevant Degree/National Diploma.
- CISSP, CISM, Security+, AZ-500 or Microsoft Security Certifications.
Desired Skills:
- Azure
- Network
- SIEM
- Security
- Cyber
Desired Qualification Level:
About The Employer:
