About the Role
Our client, a prominent financial institution, is actively seeking a skilled Cybersecurity Threat Analyst to join their security operations center. This role is based in **Bloemfontein, Free State, ZA**, and is a full-time, office-based position. The Cybersecurity Threat Analyst will be responsible for monitoring security alerts, investigating potential threats, and providing timely analysis and response to cyber incidents. You will play a vital role in defending the organization against a wide range of cyber threats. The ideal candidate will have a keen understanding of threat intelligence, incident response methodologies, and various security tools. This role requires a sharp, analytical mind and the ability to work effectively under pressure in a demanding security environment.
Key Responsibilities
- Monitor security infrastructure, including SIEM, IDS/IPS, and EDR solutions, for security events and potential threats.
- Analyze security alerts to identify malicious activity, determine the scope of potential incidents, and prioritize responses.
- Investigate security incidents, gathering evidence, documenting findings, and collaborating with incident response teams.
- Utilize threat intelligence feeds and tools to identify emerging threats and vulnerabilities relevant to the organization.
- Develop and refine threat detection rules and use cases within security monitoring tools.
- Conduct research on new attack vectors, malware, and adversary tactics, techniques, and procedures (TTPs).
- Prepare regular reports on threat landscape, incident trends, and security posture for management.
- Contribute to the improvement of security monitoring and incident response processes.
- Participate in security tabletop exercises and simulations.
Requirements
- Bachelor's degree in Cybersecurity, Computer Science, or a related field, or equivalent practical experience.
- 2-4 years of experience in a cybersecurity operations, threat analysis, or incident response role.
- Strong understanding of networking protocols (TCP/IP, DNS, HTTP/S) and operating systems (Windows, Linux).
- Experience with SIEM tools (e.g., Splunk, QRadar) and endpoint detection and response (EDR) solutions.
- Familiarity with threat intelligence platforms and methodologies.
- Excellent analytical skills and attention to detail.
- Ability to work effectively in a fast-paced, high-pressure environment.
- Good communication and reporting skills.
- Relevant certifications like Security+, CySA+, or GIAC certifications are a plus.
Benefits
- Our client offers a competitive salary, comprehensive medical and retirement benefits, and performance incentives.
- Employees benefit from ongoing training and development opportunities to stay current in the cybersecurity field.
- The role is based in our central **Bloemfontein, Free State, ZA** location, offering a stable and collaborative work environment.
- Opportunities for career advancement within the security team are available for high performers.