Cyber Security Analyst II

Clicks Group Limited; Cape Town; On-site; ZAR 720,000 - 1,020,000; Full time

Job summary

Clicks Group Limited in Cape Town seeks a Cyber Security Analyst II to strengthen the Group’s security posture through hands-on monitoring, threat analysis and incident response. You will support security platforms and conduct assessments to safeguard environments across on-premises, cloud and web applications.

The role requires collaboration with IT teams, incident coordination and contribution to playbooks, governance and security controls to reduce operational risk.

Qualifications

• At least 3 years of experience in cyber security or information security operations, including practical experience in security monitoring, incident investigation and response, vulnerability management and the operation of enterprise security technologies.
• Relevant penetration testing certification such as OSCP or PNPT.
• CISSP, CISM or equivalent will be an added advantage.

Responsibilities

• Perform security assessments, vulnerability assessments, penetration testing and targeted security reviews; document findings; recommend mitigation actions; track remediation with responsible teams; validate addressed risks.
• Participate in blue, red and purple team exercises; analyze detection and response gaps; develop mitigation procedures.
• Perform security monitoring, event triage and investigation using SIEM, endpoint, network, identity, cloud and other telemetry; escalate high-risk incidents.

Skills

Cyber security operations

Incident coordination

Data Protection

Information Security

Security assessments

Communication skills

Stakeholder collaboration

Education

IT/Systems Engineering/ Computer Science or equivalent qualification

Job description

Job category: IT-Quality Assurance and Inspection

Location: Cape Town

Contract: Permanent

Remuneration: Market Related

EE position: Yes

Introduction

We are seeking an experienced Cyber Security Analyst II to strengthen the Group’s securityposture through hands-on security monitoring, threat analysis, incident response, vulnerabilitymanagement and continuous improvement of security controls. Reporting to the CyberSecurity Lead, this role will investigate and respond to cyber security events, support securityplatforms. This position plays a pivotal role in conducting security assessments and collaboratewith technical teams to reduce operational security risk through security engineering,penetration testing and other assessment methodologies to safeguard the environmentagainst cyber security threats

JOB PURPOSE

To strengthen the Group’s security posture by monitoring, analysing and responding to cyber
security threats and incidents; operating and improving security controls; coordinating
containment, eradication and recovery activities; and supporting vulnerability management,
threat intelligence and security assurance across on-premises, cloud and web application
environments

JOB OBJECTIVES

• Perform security assessments, vulnerability assessments, penetration testing and targeted security reviews; document findings; recommend proportionate mitigation actions; track remediation with responsible teams; and validate that identified risks have been effectively addressed.
• Participate in blue, red and purple team exercises; analyse identified detection and response gaps; and develop appropriate response and or mitigation procedures.
• Perform security monitoring, event triage and investigation using SIEM, endpoint,
  network, identity, cloud and other security telemetry, escalating confirmed or high-risk incidents in accordance with the cyber security incident response process.
• Execute the Group’s cyber security strategy, policies, standards and procedures
  through implementation of security controls through relevant tooling, identifying
  control gaps, recommending improvements and maintaining supporting operational documentation.
• Monitor and analyse relevant cyber threat intelligence, assess its applicability to the Group’s environment, identify indicators of compromise and emerging attack
  techniques, and translate findings into detection, threat hunting, blocking and
  remediation actions.
• Act as a senior incident responder by validating and classifying security incidents; determining scope and impact; coordinating evidence collection, containment,
  eradication and recovery activities; maintaining accurate incident records and
  timelines; supporting forensic investigation for root cause analysis.
• Work alongside the internal Cyber Security and IT teams together with security service providers to resolve operational issues, monitor agreed service outcomes, elevate
  service or control failures to the Cyber Security Lead, and produce accurate
  operational metrics and incident reports for management and stakeholders.
• Share technical knowledge, contribute to playbooks and standard operating
  procedures, support the development of less experienced analysts, and identify skillsor capacity gaps for escalation to the Cyber Security Lead.
• Maintain the external attack surface management repository; investigate newly
  identified exposures; coordinate remediation and verify closure; monitor emerging threats, including AI-related threats; and recommend relevant updates to detections, controls, playbooks and response procedures.

QUALIFICATIONS

• Information Technology/Systems Engineering/ Computer Science or equivalent qualification.
• Relevant penetration testing certification such as Offensive Security Certified Professional (OSCP) or Professional Network Penetration Tester (PNPT).
• Certified Information Systems Security Professional (CISSP), Certified Information Systems Manager (CISM), etc. will be an added advantage.

JOB-RELATED KNOWLEDGE & EXPERIENCE

• At least 3 years of experience in cyber security or information security operations,including practical experience in security monitoring, incident investigation andresponse, vulnerability management and the operation of enterprise securitytechnologies.
• Strong knowledge of incident response methodologies, evidence handling, forensicprinciples, attack techniques, indicators of compromise, log analysis, root causeanalysis and post-incident recovery activities.
• Strong knowledge of cyber security governance and operational practices.
• Strong knowledge and understanding of risk and compliance management

JOB-RELATED SKILLS

• Excellent written and verbal communication skills
• Ability to manage ambiguity/ complexity
• Able to cultivate innovation
• Ability to collaborate cross-functionally
• Ability to establish and maintain strong relationships with stakeholders at different levels
• Cyber security operations and incident coordination
• Data Protection
• Information Security
• Security assessments

JOB-RELATED COMPETENCIES

• Analysing and Interpreting
• Delivering Results and Meeting Customer Expectations
• Relating and Networking
• Applying Expertise and Technology
• Adapting and Responding to change
• Deciding and Initiating Risk-Based Action
• Presenting and Communicating Information