Senior Security Analyst

Cape Town is calling… and no, this isn’t another job where “cybersecurity” means resetting passwords.

We’re looking for an experienced Senior Security Analyst to join a high-performing technology environment and take ownership across Security Operations, Cloud Security, Vulnerability Management, Security Engineering, GRC and DevSecOps.

If you know your Microsoft Defender from your Microsoft Teams, can investigate a real security incident, and understand that “Zero Trust” is more than a buzzword, this one’s for you.

What you’ll be doing

Security Operations

• Monitor and investigate security events across cloud, endpoints, networks and applications.
  
• Perform threat hunting, incident response and root-cause analysis.
  
• Enhance SIEM capabilities, playbooks and security monitoring.
  

Vulnerability Management

• Manage vulnerability scanning and risk-based prioritization.
  
• Coordinate remediation with ICT teams and validate fixes.
  
• Produce vulnerability and risk reporting.
  

Security Engineering & Cloud

• Design and implement security controls across Azure, Microsoft 365, Entra ID, Windows, Linux and DevOps.
  
• Implement MFA, PAM, EDR, DLP and security automation.
  
• Secure Azure environments, conduct cloud assessments and support Zero Trust initiatives.
  

GRC & Security Architecture

• Conduct cybersecurity risk assessments and maintain risk registers.
  
• Support audits, policies and compliance requirements including POPIA and CIS Controls.
  
• Review security designs and define secure architecture standards and baselines.
  

DevSecOps & Awareness

• Support secure development, code scanning and security testing.
  
• Help development teams remediate security vulnerabilities.
  
• Drive security awareness, training and organizational cyber resilience.
  

What you’ll need

• 7+ years ICT experience, including 5+ years in cybersecurity.
  
• Strong enterprise security technology experience.
  
• Proven experience in incident response, threat investigation and vulnerability management.
  
• Strong Azure, Microsoft 365, Entra ID and Active Directory experience.
  
• Experience securing cloud platforms and working in regulated environments.
  
• Strong knowledge of firewalls, IDS/IPS, VPN, segmentation and ZTNA.
  
• Scripting and automation skills using PowerShell, Python, Bash and REST APIs.
  
• Experience with Microsoft Defender, PAM, EDR, DLP, vulnerability management and security monitoring tools.
  

Qualifications & certifications

• Minimum: Matric
  
• A relevant Degree/National Diploma.
  
• CISSP, CISM, Security+, AZ-500 or Microsoft Security Certifications.