Senior Security Analyst - Hybrid

Description: Security operations and monitoring:

• Monitor security events across infrastructure, cloud platforms, endpoints, networks and applications.
• Investigate security alerts and incidents.
• Perform threat hunting and root cause analysis.
• Maintain and enhance SIEM and security monitoring capabilities.
• Coordinate incident response activities and post-incident reviews.
• Develop and maintain security playbooks and response procedures.

Vulnerability management

• Manage vulnerability scanning programmes.
• Analyse vulnerability assessment results.
• Coordinate remediation efforts with ICT teams.
• Validate remediation activities.
• Produce regular vulnerability and risk reports.
• Establish risk-based prioritisation of vulnerabilities

Security engineering

• Design and implement security controls across Microsoft 365, Azure, Active Directory / Entra ID, Linux and Windows servers, network infrastructure and DevOps platforms.
• Implement and maintain multi-factor authentication, Privileged Access Management, Endpoint Detection and Response, Data Loss Prevention and security automation solutions.
• Evaluate and implement new security technologies.

Cloud security

• Secure Azure cloud environments.
• Review cloud configurations and architecture.
• Conduct cloud security assessments.
• Implement Microsoft security best practices.
• Support Zero Trust initiatives.

Governance, risk and compliance

• Maintain cybersecurity risk registers.
• Conduct risk assessments.
• Support internal and external audits.
• Assist with policy and standard development.
• Support compliance requirements including POPIA, CIS Controls, and regulatory and client requirements.

Security architecture

• Review and approve security designs.
• Assess new solutions and projects for security risks.
• Define security standards and baselines with Team Lead and Line Manager.
• Develop secure architecture patterns with Team Lead.

Security awareness

• Promote security awareness initiatives. • Conduct security training. • Guide technical and business teams. • Support organisational cyber resilience programmes. DevSecOps:

• Support secure software development practices.
• Review security testing and code scanning.
• Assist development teams with remediation activities.

Qualifications Minimum

• Matric with 10 years' work experience/or a bachelors degree or National Diploma in Information Secu

.special-hidden { display: none; }