Senior Security Analyst - Hybrid

Das ist der Job

Infrastructure: • Azure, Microsoft 365, Active Directory, Entra ID, Windows Server, Linux, VMware.

Darum lohnt es sich

Vulnerability management: • Manage vulnerability scanning programmes. • Analyse vulnerability assessment results. • Coordinate remediation efforts with ICT teams. • Validate remediation activities. • Produce regular vulnerability and risk reports. • Establish risk-based prioritisation of vulnerabilities Security engineering: • Design and implement security controls across Microsoft 365, Azure, Active Directory / Entra ID, Linux and Windows servers, network infrastructure and DevOps platforms. • Implement and maintain multi-factor authentication, Privileged Access Management, Endpoint Detection and Response, Data Loss Prevention and security automation solutions. • Evaluate and implement new security technologies.

Security architecture: • Review and approve security designs. • Assess new solutions and projects for security risks. • Define security standards and baselines with Team Lead and Line Manager. • Develop secure architecture patterns with Team Lead.

Security awareness: • Promote security awareness initiatives. • Conduct security training. • Guide technical and business teams. • Support organisational cyber resilience programmes. DevSecOps: • Support secure software development practices. • Review security testing and code scanning. • Assist development teams with remediation activities.

Behavioural competencies • Analytical thinking • Problem solving • Risk-based decision-making • Attention to detail • Accountability • Communication skills • Stakeholder management • Teamwork and collaboration • Customer focus • Continuous learning • Integrity and professionalism Key performance indicators: • Reduction in critical vulnerabilities. • Incident response service-level adherence. • Security control effectiveness. • Completion of risk assessments. • Audit finding remediation rate. • Security awareness participation rates. • Compliance maturity improvements. • Security monitoring coverage.

Description Security operations and monitoring: • Monitor security events across infrastructure, cloud platforms, endpoints, networks and applications. • Investigate security alerts and incidents. • Perform threat hunting and root cause analysis. • Maintain and enhance SIEM and security monitoring capabilities. • Coordinate incident response activities and post-incident reviews. • Develop and maintain security playbooks and response procedures.

Cloud security: • Secure Azure cloud environments. • Review cloud configurations and architecture. • Conduct cloud security assessments. • Implement Microsoft security best practices. • Support Zero Trust initiatives.

Governance, risk and compliance: • Maintain cybersecurity risk registers. • Conduct risk assessments. • Support internal and external audits. • Assist with policy and standard development. • Support compliance requirements including POPIA, CIS Controls, and regulatory and client requirements.

Qualifications Minimum • Matric with 10 years' work experience/or a bachelor’s degree or National Diploma in Information Security, Computer Science, Information Technology, Engineering or analytical related field.

Preferred certifications: • CISSP • CISM • CompTIA Security+ • Microsoft Security certifications • Microsoft Azure Security Engineer Associate (AZ-500) Experience Required: • Seven or more years of ICT experience. • Five or more years of cybersecurity experience. • Experience managing enterprise security technologies. • Experience in incident response and threat investigation. • Experience with vulnerability management programmes. • Experience securing cloud platforms. • Experience working within regulated environments.

Preferred: • Experience with the Microsoft security stack. • Experience with DevSecOps practices. • Experience with SIEM and SOAR platforms. • Experience with Zero Trust architecture.

Technical skills: Security technologies: • Microsoft Defender suite, Zabbix, Vulnerability management tools, Privileged Access Management solutions, Email security platforms, Data Loss Prevention solutions, Identity Access Management, Endpoint Management, Certificate Authority.

Networking: • TCP/IP, Firewalls, IDS/IPS, VPN technologies, Network segmentation, ZTNA technologies (Netskope). Automation and scripting: • PowerShell, Python, Bash, REST APIs, Security automation.