Senior Security Analyst

Cape Town is calling… and no, this isn't another job where cybersecurity means resetting passwords.

We're looking for an experienced Senior Security Analyst to join a high-performing technology environment and take ownership across Security Operations, Cloud Security, Vulnerability Management, Security Engineering, GRC and Dev Sec Ops .

If you know your Microsoft Defender from your Microsoft Teams, can investigate a real security incident, and understand that "Zero Trust" is more than a buzzword, this one's for you.

Monitor and investigate security events across cloud, endpoints, networks and applications.

Perform threat hunting, incident response and root-cause analysis.

Enhance SIEM capabilities, playbooks and security monitoring.

Manage vulnerability scanning and risk-based prioritization.

Coordinate remediation with ICT teams and validate fixes.

Produce vulnerability and risk reporting.

Design and implement security controls across Azure, Microsoft 365, Entra , Windows, Linux and Dev Ops.

Implement MFA, PAM, EDR, DLP and security automation.

Secure Azure environments, conduct cloud assessments and support Zero Trust initiatives.

Conduct cybersecurity risk assessments and maintain risk registers.

Support audits, policies and compliance requirements including POPIA and CIS Controls.

Review security designs and define secure architecture standards and baselines.

Support secure development, code scanning and security testing.

Help development teams remediate security vulnerabilities.

Drive security awareness, training and organizational cyber resilience.

7+ years ICT experience, including 5+ years in cybersecurity.

Strong enterprise security technology experience.

Proven experience in incident response, threat investigation and vulnerability management.

Strong Azure, Microsoft 365, Entra  Active Directory experience.

Experience securing cloud platforms and working in regulated environments.

Strong knowledge of firewalls, IDS/IPS, VPN, segmentation and ZTNA.

Scripting and automation skills using Power Shell, Python, Bash and REST APIs.

Experience with Microsoft Defender, PAM, EDR, DLP, vulnerability management and security monitoring tools.

Minimum:
MatricA relevant Degree/National Diploma.

CISSP, CISM, Security+, AZ-500 or Microsoft Security Certifications.