Principal Cyber Security Specialist - Blue Team

JOB TITLE

Principal Cyber Security Specialist (Blue Team)

Hybrid / Remote (Johannesburg / Cape Town)

Cyberlogic is a trusted Managed Solutions Provider with offices in South Africa, Mauritius, and the UK. Serving a diverse range of clients, spanning numerous industries, including the international maritime sector, Cyberlogic specialises in IT leadership, cyber security, cloud solutions, and business intelligence. For almost three decades, Cyberlogic has been committed to enabling digital transformation through delivering unquestionable value.

Our delivery focus has enabled us to build up a national and international footprint of loyal clients that rely on us to provide transparent, open guidance to improve their processes, grow their businesses, and secure their data.

Cyberlogic is part of the Hyperclear Technology group, which boasts a diverse technology offering including robotic process automation (RPA), business process management (BPM) data analytics, and decisioning technology.

Through our non-profit, R4C (Ride for a Child), we partner with Bright Start Education Foundation, an organisation empowering deserving learners from underprivileged communities, providing holistic support and guidance throughout their educational careers.

• We challenge ourselves to be more AWESOME
• We are driven to KEEP learning and EVOLVING
• We look beyond symptoms to identify and RESOLVE ROOT CAUSES
• We hold each other accountable through CANDID and constructive FEEDBACK
• We respect and care for each other and know we will only SUCCEED if we work AS A TEAM
• We CARE deeply ABOUT the success of CYBERLOGIC
• We FINISH WHAT WE START
• We always GIVE OUR BEST even if it means putting in the hard yards
• We KEEP THINGS SIMPLE

As a Principal Cyber Security Specialist, your role will be to provide strategic investigative leadership for the Blue Team. You will be a principal resource in ensuring effective incident response, high-quality threat detection, risk alignment, and thorough forensic investigations. The role drives continuous improvement initiatives, mentors and guides analysts, and delivers clear, actionable insights to leads and business stakeholders.

Additionally, the role is responsible for developing and maintaining in-depth documentation for forensic investigations and incident response procedures, as well as delivering structured training to enhance team capability, consistency, and operational maturity.

• Development and management of an in-depth forensic investigation environment (sandbox) and advanced analysis tooling to support secure malware detonation, threat analysis, evidence preservation, and detailed incident investigations.
• Possesses advanced expertise across multiple forensic disciplines, including digital forensics, computer forensics, network forensics, and memory forensics, enabling comprehensive investigation, evidence analysis, and incident reconstruction across diverse environments.
• Lead the implementation of policies and frameworks by coordinating with relevant teams and ensuring they are effectively integrated into the organisation's operations.
• Leverages proactive security technologies, including threat intelligence feeds and emerging cybersecurity solutions, to continuously improve detection accuracy, accelerate response times, and enhance overall resilience against evolving threats.

• Lead the identification, assessment, and prioritisation of cyber security risks, developing clear, actionable risk analysis reports that quantify potential risks, present findings to clients for decision-making, and outline mitigation strategies aligned with the organisation’s security policies and best practices.
• Oversee the risk management process by ensuring that all risks are recorded and assigned to a risk owner to manage the risk.
• Conduct complex cyber security risk assessments, identifying strategic and operational risks, and potential vulnerabilities in the organisation.
• Lead and oversee implementation of risk mitigation strategies.

• Regularly evaluate and refine security processes to ensure they…