Senior Security Analyst

About the role

Our client in Somerset West, Western Cape, is seeking a Senior Security Analyst to strengthen their security operations and governance. You will work closely with ICT teams to protect cloud, on‑premise and endpoint environments while driving continuous improvement of security processes.

Key responsibilities

• Monitor security events across infrastructure, cloud platforms, endpoints, networks and applications using SIEM tools.
• Investigate alerts, conduct threat hunting, perform root‑cause analysis and coordinate incident response.
• Manage vulnerability scanning programmes, analyse findings, prioritize remediation and produce risk reports.
• Design and implement security controls for Microsoft 365, Azure, Active Directory/Entra ID, Linux and Windows servers, network infrastructure and DevOps pipelines.
• Secure Azure environments, review cloud configurations, conduct assessments and support Zero Trust initiatives.
• Maintain risk registers, conduct risk assessments, support audits and ensure compliance with POPIA, CIS Controls and client requirements.
• Review security architecture designs, define standards and develop secure architecture patterns.
• Promote security awareness, deliver training and support organisational cyber‑resilience programmes.
• Assist development teams with DevSecOps practices, code scanning and remediation.

Required profile

• Matric with 10 years experience or a Bachelor’s degree/National Diploma in Information Security, Computer Science, IT, Engineering or a related analytical field.
• Preferred certifications: CISSP, CISM, CompTIA Security+, Microsoft Security certifications, Azure Security Engineer Associate (AZ‑500).

Required skills

• SIEM and security monitoring
• Threat hunting and incident response
• Vulnerability management and risk reporting
• Microsoft 365, Azure, Active Directory/Entra ID
• Linux and Windows server hardening
• Network security and firewall management
• DevOps security tooling
• Multi‑factor authentication, Privileged Access Management, Endpoint Detection & Response, Data Loss Prevention
• Security automation and scripting
• Cloud security best practices and Zero Trust architecture
• Risk assessment, POPIA compliance, CIS Controls
• Security architecture design and review
• DevSecOps, secure code scanning and remediation