Security Analyst (L2) – Microsoft Cloud & SOC

About the role

We are seeking a proactive, detail‑oriented Security Analyst (L2) to join our expanding cybersecurity team in Johannesburg. You will protect a Microsoft‑centric cloud and enterprise environment, focusing on threat detection, investigation, and response.

Key responsibilities

• Monitor, triage, and investigate alerts using Microsoft Sentinel (SIEM/SOAR).
• Respond to incidents such as malware, phishing, identity compromise, and data exfiltration; produce root‑cause analyses and incident reports.
• Manage Microsoft Defender suite (Endpoint, Identity, Cloud Apps, Office 365) and improve detection accuracy.
• Secure Azure workloads, identities, and networks; implement Zero‑Trust controls, RBAC, conditional access, and MFA.
• Operate Fortinet solutions (FortiGate, FortiAnalyzer, FortiManager) and integrate network logs into Sentinel.
• Develop and maintain incident‑response playbooks aligned with MITRE ATT&CK and compliance standards.
• Support the full vulnerability lifecycle using Microsoft Defender Vulnerability Management.
• Assist with data‑protection tools (Microsoft Purview) and compliance initiatives (POPIA, ISO 27001, GDPR).
• Contribute to security policies, collaborate across teams, and stay current with emerging threats.

Required profile

• Proactive and detail‑oriented with strong analytical abilities.
• Ability to work collaboratively with IT, cloud, and development teams.
• Commitment to continuous learning in Microsoft security technologies.

Required skills

• Microsoft Sentinel
• Microsoft Defender (Endpoint, Identity, Cloud Apps, Office 365)
• Microsoft Azure IAM, networking, and security controls
• Microsoft Purview (DLP, sensitivity labels)
• Fortinet solutions (FortiGate, FortiAnalyzer, FortiManager)
• SIEM/SOAR concepts
• MITRE ATT&CK framework
• RBAC, conditional access, MFA
• Vulnerability management tools (Microsoft Defender Vulnerability Management)
• Compliance knowledge (POPIA, ISO 27001, GDPR)

What we offer

• Opportunity to work with cutting‑edge Microsoft security technologies.
• Collaborative environment with cross‑functional teams.
• Professional development and continuous learning support.