Cyber Security Specialist

Mimecast; Johannesburg; On-site; ZAR 560 000 - 840 000; Full time

Job summary

A leading cybersecurity firm in Johannesburg is seeking a Cyber Security Specialist to proactively identify and manage the organization's attack surface. You will need a minimum of 3 years' experience in cyber security and a strong understanding of both technical and regulatory aspects. The role includes vulnerabilities assessments, incident response support, and collaboration with cross-functional teams for risk mitigation and strategy execution. The position offers a salary range of R560,000 to R840,000 plus benefits.

Qualifications

• 3+ years in cyber security with focus on attack surface management.
• Strong understanding of web technologies and security tooling.
• Experience with Python or PowerShell for automation.

Responsibilities

• Continuously identify and catalogue assets using discovery techniques.
• Prioritize remediation efforts for vulnerabilities based on risk.
• Develop and present actionable reports for stakeholders.

Skills

Cyber security experience

Vulnerability management

Risk assessment

Collaboration

Communication skills

Education

Relevant security certifications (e.g., CISSP, OSCP)

Tools

AWS

Azure

GCP

EDR tools

SIEM tools

Job description

About the Role

As a Cyber Security Specialist, you will play a pivotal role in proactively identifying, evaluating, and reducing the attack surface of our organization. Reporting to the Senior Director of Security Operations, you will leverage cutting-edge tools, threat intelligence, and cross-functional collaboration to ensure our external and internal digital assets are continuously monitored, inventoried, and protected.

What You'll Do

• Attack Surface Discovery: Continuously identify and catalogue all external and internal assets (cloud, on-premises, IoT, third-party systems, etc.) using automated and manual discovery techniques.
• Vulnerability Management: Evaluate discovered assets for vulnerabilities and misconfigurations; prioritize remediation efforts based on risk and business impact.
• Threat Intelligence Integration: Correlate attack surface data with threat intelligence to contextualize findings and anticipate emerging risks.
• Attack Surface Reduction: Partner with IT, DevOps, and application teams to minimize unnecessary exposures and streamline asset footprint.
• Incident Response Support: Provide asset and exposure data during security incident investigations to enable rapid containment and remediation.
• Reporting & Metrics: Develop and present clear, actionable reports and dashboards for technical and executive audiences, including trend analysis and attack surface KPIs.
• Tool Evaluation & Management: Assess, deploy, and manage Attack Surface Management (ASM) platforms and related technologies.
• Policy Development: Contribute to security policies, standards, and best practices surrounding asset inventory and exposure management.
• Awareness & Training: Educate stakeholders on attack surface risks and mitigation strategies.
• Security Strategy: support the successful execution of the Security Strategy.

What You'll Bring

• Experience: 3+ years in cyber security, with a focus on attack surface management, asset discovery, or vulnerability management in a large enterprise or technology environment.
• Technical Skills: Strong understanding of networking, web technologies, cloud platforms (AWS, Azure, GCP), and security tooling (ASM, EDR, SIEM, etc.) and vulnerability scanning tools.
• Analytical Abilities: Proficient in risk assessment, data analysis, and correlating technical findings with business risk.
• Collaboration: Demonstrated ability to work with cross-functional teams, including IT, application development, and business units.
• Certifications: Relevant security certifications preferred (e.g., CISSP, OSCP, GIAC, CompTIA Security+).
• Communication: Excellent written and verbal communication skills; ability to convey complex technical issues to diverse audiences.
• Familiarity with regulatory requirements (e.g., GDPR, HIPAA, PCI-DSS) and how they impact asset and exposure management.
• Experience with automation and scripting for asset discovery and reporting (e.g., Python, PowerShell).
• Background in incident response and digital forensics.

What Join Us?

You will be a key contributor to the organization\'s proactive cyber defence posture, directly supporting the Senior Director of Security Operations and influencing how the company manages digital risk in a dynamic technology landscape.

The base salary range for this position is R560,000 − R840,000 plus benefits. This range represents the minimum and maximum new hire compensation for this role. The position may also be eligible for incentive plans and additional benefits, in accordance with company policy and local regulations. Our salary ranges are determined by role, level, and location with individual compensation also dependent on factors such as qualifications, experience, and skills. Final offers will reflect these considerations and may vary accordingly.

#LI-YK1

Belonging at Mimecast

Cybersecurity is a community effort. That’s why we’re committed to building an inclusive, diverse community that celebrates and welcomes everyone – unless they’re a cybercriminal, of course.

We’re proud to be an Equal Opportunity and Affirmative Action Employer, and we’d encourage you to join us whatever your background. We particularly welcome applicants from traditionally underrepresented groups.

We consider everyone equally: your race, age, religion, sexual orientation, gender identity, ability, marital status, nationality, or any other protected characteristic won’t affect your application.

Due to certain obligations to our customers, an offer of employment will be subject to your successful completion of applicable background checks, conducted in accordance with local law.