Cyber Security Analyst II

Job category: IT-Quality Assurance and Inspection

Location: Cape Town

Contract: Permanent

Remuneration: Market Related

EE position: Yes

We are seeking an experienced Cyber Security Analyst II to strengthen the Group’s security posture through hands-on security monitoring, threat analysis, incident response, vulnerability management and continuous improvement of security controls. Reporting to the Cyber Security Lead, this role will investigate and respond to cyber security events, support security platforms. This position plays a pivotal role in conducting security assessments and collaborate with technical teams to reduce operational security risk through security engineering,penetration testing and other assessment methodologies to safeguard the environmentagainst cyber security threats

JOB PURPOSE

To strengthen the Group’s security posture by monitoring, analysing and responding to cyber
security threats and incidents; operating and improving security controls; coordinating
containment, eradication and recovery activities; and supporting vulnerability management,
threat intelligence and security assurance across on-premises, cloud and web application
environments

JOB OBJECTIVES

• Perform security assessments, vulnerability assessments, penetration testing and targeted security reviews; document findings; recommend proportionate mitigation actions; track remediation with responsible teams; and validate that identified risks have been effectively addressed.
• Participate in blue, red and purple team exercises; analyse identified detection and response gaps; and develop appropriate response and or mitigation procedures.
• Perform security monitoring, event triage and investigation using SIEM, endpoint,
  network, identity, cloud and other security telemetry, escalating confirmed or high-risk incidents in accordance with the cyber security incident response process.
• Execute the Group’s cyber security strategy, policies, standards and procedures
  through implementation of security controls through relevant tooling, identifying
  control gaps, recommending improvements and maintaining supporting operational documentation.
• Monitor and analyse relevant cyber threat intelligence, assess its applicability to the Group’s environment, identify indicators of compromise and emerging attack
  techniques, and translate findings into detection, threat hunting, blocking and
  remediation actions.
• Act as a senior incident responder by validating and classifying security incidents; determining scope and impact; coordinating evidence collection, containment,
  eradication and recovery activities; maintaining accurate incident records and
  timelines; supporting forensic investigation for root cause analysis.
• Work alongside the internal Cyber Security and IT teams together with security service providers to resolve operational issues, monitor agreed service outcomes, elevate
  service or control failures to the Cyber Security Lead, and produce accurate
  operational metrics and incident reports for management and stakeholders.
• Share technical knowledge, contribute to playbooks and standard operating
  procedures, support the development of less experienced analysts, and identify skillsor capacity gaps for escalation to the Cyber Security Lead.
• Maintain the external attack surface management repository; investigate newly
  identified exposures; coordinate remediation and verify closure; monitor emerging threats, including AI-related threats; and recommend relevant updates to detections, controls, playbooks and response procedures.

• Information Technology/Systems Engineering/ Computer Science or equivalent qualification.
• Relevant penetration testing certification such as Offensive Security Certified Professional (OSCP) or Professional…