Threat and Vulnerability Management Specialist

Location: Gauteng

Positions Available: 5

Salary: Market-related

Employment type: 3 Year contract, hybrid

We are seeking experienced and technically proficient Threat and Vulnerability Management Specialists to identify, assess, prioritise and manage cybersecurity threats and vulnerabilities across complex enterprise IT environments. The successful candidates will play a critical role in strengthening organisational security by proactively identifying vulnerabilities, evaluating potential threats, coordinating remediation activities and implementing effective vulnerability management processes. This position requires strong hands‑on experience with vulnerability assessment tools, threat intelligence, security risk analysis and enterprise cybersecurity technologies.

• Conduct regular vulnerability assessments across servers, networks, endpoints, applications, databases and cloud environments.
• Identify, analyse and prioritise security vulnerabilities based on severity, exploitability, asset criticality and business impact.
• Implement and maintain enterprise vulnerability management programmes, processes and procedures.
• Operate and administer vulnerability scanning and assessment tools.
• Analyse vulnerability scan results and distinguish genuine security risks from false positives.
• Monitor emerging cyber threats, vulnerabilities, exploits and security advisories.
• Correlate threat intelligence with identified vulnerabilities to determine potential organisational exposure.
• Coordinate vulnerability remediation activities with infrastructure, networking, cloud, application and security teams.
• Track remediation progress and ensure vulnerabilities are addressed within agreed service‑level targets.
• Conduct risk assessments and recommend appropriate mitigation or compensating controls.
• Support patch management activities and verify successful remediation.
• Perform vulnerability assessments on internal and external infrastructure.
• Assist with identifying security weaknesses in cloud‑based and hybrid environments.
• Develop vulnerability management dashboards, reports and risk metrics for technical teams and management.
• Maintain accurate vulnerability registers, remediation records and risk documentation.
• Support cybersecurity incident response and threat investigation activities when required.
• Ensure vulnerability management practices align with relevant information security frameworks and regulatory requirements.
• Recommend continuous improvements to vulnerability identification, prioritisation and remediation processes.

• Relevant diploma or degree in Information Technology, Computer Science, Cybersecurity, Information Security or a related discipline.
• Typically 3–5 years of relevant experience in vulnerability management, cybersecurity operations, threat management or information security.
• Proven hands‑on experience conducting vulnerability assessments in enterprise IT environments.
• Practical experience using enterprise vulnerability scanning and assessment tools.
• Strong understanding of common vulnerabilities, attack vectors, exploitation techniques and cybersecurity threats.
• Experience analysing vulnerability scan results and developing remediation recommendations.
• Knowledge of the Common Vulnerabilities and Exposures (CVE) system and Common Vulnerability Scoring System (CVSS).
• Understanding of patch management, vulnerability remediation and security risk management processes.
• Familiarity with threat intelligence sources and vulnerability advisories.
• Experience working with Windows, Linux, network infrastructure and enterprise applications.
• Understanding of cloud security vulnerabilities and associated security controls.
• Knowledge of recognised cybersecurity frameworks such as…