Cyber Security Analyst

Tfg (The Foschini Group); Gauteng; On-site; ZAR 500,000 - 800,000; Full time

Job summary

A leading company in the retail industry is seeking a cybersecurity professional to enhance their security operations. The role involves monitoring alerts, incident management, and collaboration with various IT security tools. Ideal candidates will have extensive experience in cybersecurity roles and a passion for continuous improvement within technology teams. Join a purpose-driven team and make a meaningful impact across the organization.

Qualifications

• 4-6 years' experience in a SOC or cybersecurity role.
• Preferred experience with multiple advanced security tools mentioned.
• Knowledge of Cloud Security Operations, Application Security, and Data Protection.

Responsibilities

• Monitor security alerts and events; perform log management and develop detection rules.
• Analyze and respond to security incidents; manage incidents end-to-end.
• Participate in various team exercises and conduct risk assessments.

Skills

Communication

Collaboration

Time Management

Stress Management

Continuous Learning

Decision Making

Tools

Microsoft Defender XDR

EDR

UNIX

Linux

Job description

TFG is an internationally diversified retail portfolio of 34 speciality lifestyle and apparel brands that inspire our customers to live their best lives and are woven into the lives of millions.

Our vision is to create the most remarkable omnichannel experiences for our customers.

TFG is more than a workplace; it's a launchpad for your growth.

Join us and explore endless growth opportunities across our diverse brands.

We're a purpose-led business, and on this team, you'll share the pride of making an impact across a whole industry. We're the designers, the makers, the shakers, and the teams behind the scenes. Are you with us?

Key Responsibilities

• Security Monitoring: Continuously monitor security alerts and events from various sources, including Microsoft Sentinel, Defender for Endpoint, and Defender for Cloud. Perform log management, develop detection rules, leverage behavioral analytics, and customize playbooks. Conduct threat hunting and maintain risk profiles.
• Incident Response: Analyze and investigate security incidents, respond promptly, document, and report incidents. Manage cybersecurity incidents end-to-end, including stakeholder engagement and report writing. Automate repetitive tasks.
• Testing and Validation: Participate in Blue/Red/Purple team exercises, cyber crisis simulations, and tabletop exercises.
• Business Context and Risk Management: Understand business value chains, processes, architecture, and conduct risk assessments.
• Endpoint Detection and Response (EDR): Manage endpoint security, perform health checks, conduct scans, and collaborate with threat intelligence teams.
• Technology Leadership: Drive continuous improvement, platform optimization, research, development, and technical communication. Create dashboards and present to leadership.

Qualifications and Experience

• 4-6 years' experience in a SOC or cybersecurity role.
• Preferred experience with Microsoft Defender XDR, EDR, JAMF, Symantec DCS, DNS, network security, Mimecast, Symantec DLP, FortiAnalyzer, Sophos, CrowdStrike, Azure Sentinel.
• Experience with Windows, VMware, Cisco, UNIX, Linux, and security tools like WAF, Proxy, IDS, firewalls, anti-virus, IAM, MFA, NAC, DLP.
• Knowledge of Cloud Security Operations, Mobile Architecture, Network, Application Security, and Data Protection.

Skills and Behaviours

• Excellent communication skills in English.
• Collaborative mindset, reporting skills, time management, stress management, continuous learning attitude.
• Action-oriented, effective communicator, courageous, decision-maker, accountable, able to manage complexity, plan, and leverage technology.

Preference given to candidates from designated groups per the Employment Equity Act.