We are looking for a Cybersecurity Analyst to help protect our people, systems and data. You will monitor for threats, respond to security events, manage vulnerabilities, and help keep our security controls effective. This role suits someone early in their security career who wants to grow, as well as someone with a few years' experience ready to take on more ownership.
Key responsibilities
Monitor security alerts and logs from security tools (e.g. SIEM, EDR, email and identity protection), and triage, investigate and escalate as needed.
Support incident response: containment, investigation, documentation and follow-up actions.
Run vulnerability scans, track findings, and work with IT teams to get them remediated.
Help maintain and tune security tools and controls.
Support identity and access management: access reviews, privileged account controls, joiner/mover/leaver checks.
Assist with patch compliance and secure configuration of endpoints, servers and cloud services.
Review and respond to phishing reports and suspicious activity raised by users.
Contribute to security policies, procedures and runbooks, and keep documentation current.
Support audits, risk assessments and compliance activities (e.g. ISO 27001, POPIA).
Help deliver security awareness to staff.
Stay current on threats, vulnerabilities and industry good practice.
Work experience & Requirements:
Diploma or degree in IT, Computer Science, Information Security or a related field, or equivalent practical experience.
1 - 4 years in IT or cybersecurity (service desk, systems administration or networking experience counts).
Working knowledge of Windows and Active Directory, networking fundamentals (TCP/IP, DNS, firewalls), and common attack techniques.
Familiarity with at least one security tool category: SIEM, EDR/antivirus, vulnerability scanning, or email security.
Advantageous:
Certifications such as CompTIA Security+, CySA+, Microsoft SC-200/SC-300/AZ-500, ISC2 CC, or equivalent.
Exposure to cloud platforms (Microsoft 365, Azure, AWS) and their security controls.
Scripting experience (PowerShell, Python).
Knowledge of frameworks such as MITRE ATT&CK, NIST CSF, CIS Controls or ISO 27001.
Skills and attributes:
Analytical, curious and methodical when investigating problems.
Clear written and verbal communication, including explaining technical issues to non-technical people.
Good documentation habits.
Able to prioritise and stay calm under pressure during incidents.
Trustworthy and discreet with confidential information.
Keen to learn and grow in the security field.
Willing to be part of an on-call or standby rotation, if required.