CDC Engineer

Gijima Holdings; Midrand; On-site; ZAR 500 000 - 700 000; Full time

Job summary

A cybersecurity firm in Midrand seeks an experienced analyst to conduct cyber intelligence operations and produce detailed reports on threats. Candidates must have 5-8 years' experience, including familiarity with IBM QRadar and relevant security certifications. The role involves compiling security advisories, training junior staff, and analyzing security data to make actionable recommendations. Competitive salary and supportive work environment offered.

Qualifications

• 5-8 years' work-related experience as a Level 1 / 2 Analyst.
• Formal training in Networking and networking protocols.
• Experience in a Security Operations Centre environment.

Responsibilities

• Conduct cyber intelligence operations and track threat actors.
• Compile security advisories for clients with recommendations.
• Train junior analysts and develop documentation on incidents.

Skills

Analytic skills

Problem solving skills

Communication skills

Customer orientation

Planning and organizing skills

Education

Grade 12

IT Certificate / Diploma / Degree

Tools

IBM QRadar

Windows and Active Directory

Unix and Linux

Anti-Malware Systems

Firewalls

Scripting languages

Job description

FORMAL EDUCATION :

• Grade 12 (essential)
• IT Certificate / Diploma / Degree

TECHNICAL CERTIFICATION :

• IBM Qradar Certification
• CISSP, CEH, GPEN, OSCP or similar security certifications
• CCNA advantageous
• Security +
• Introduction to information security an advantage

EXPERIENCE :

• Experience analysing phishing attacks
• Experience producing reports and briefs on the current threat landscape and associated risks
• Experience monitoring third party security related websites, forums and social media sites for information regarding vulnerabilities and exploits
• Experience conducting malware analysis usage of VirusTotal etc
• Experience replicating reported vulnerabilities in a safe and contained environment to develop proof of concept and / or exploit tools
• Working Knowledge with the following technologies : Windows and Active Directory, Unix and Linux, Routers & Switches, Anti-Malware Systems, Relational Databases, Open-Source Intelligence, Firewall, IDS / IPS, Vulnerability Management & Proxy management or solid understanding of these technologies.
• 5 8 years' work-related experience as a Level 1 / 2 Analyst
• Formal training in Networking and networking protocols
• Experience in malware investigation advantageous
• Experience in server / network / firewall / ips administration
• Experience in a Security Operations Centre environment & a Network Monitoring environment
• Understanding of the different types of Cyber Security Attacks & how to prevent them

RESPONSIBILITIES :

• Conduct cyber intelligence operations including intelligence collection, tracking threat actors, identifying malicious behaviours and operations.
• Works with customers, vendors and internal resources for problem resolution and security advisories
• Standardizes process and procedures and provides continual improvement
• Develops and maintain comprehensive documentation on incidents and analysis for clients and internal
• Compile security advisories for internal and external in document format with technical recommendations
• Use case writing, development and refinement for detection of threats
• Proactively search for rogue behaviour, malicious attacks & suspicious activity
• Training of junior analysts
• Analyse threat feeds to produce daily / weekly / monthly Threat Intelligence brief and regular threat trend reporting
• Analyse security events / alerts and recommend remedial actions
• Analyse vulnerability scan data and recommend remedial actions
• Analyse trends across time and clients for remedial actions
• Provide analysis in contracted reports
• Health checks on monitored devices

  Knowledge

  • How to analyse data
  • IBM QRadar experience
  • Must have an understanding of use cases
  • Must have excellent problem solving skills.
  • Detailed technical knowledge of technology protocols (TCP / IP, SMB, SSH etc)
  • Good knowledge of scripting languages

  Skills

  • Communication skills (verbal and written - report writing, email and presentation)
  • Problem solving skills
  • Customer orientation
  • Planning and organising skills
  • Analysing skills
  • Writing and Reporting
  • Learning and Researching
  • Creating & Innovating
  • Delivering Results & Meeting Customer Expectations

  Personal attributes

  • Presenting and Communicating Information
  • Deciding and Initiating Action
  • Coping with Pressures and Setbacks
  • Applying Expertise and Technology
  • Following Instructions and Procedures
  • Ability to work well independently & productively with minimal supervision.