L1 Cybersecurity Analyst

Aspen Pharma Group; Johannesburg; On-site; ZAR 300 000 - 450 000; Full time

Job summary

Aspen Pharma Group is seeking an L1 Cybersecurity Analyst to join their Cybersecurity Operations team in Johannesburg. This entry-level role involves supporting security operations, incident response, and vulnerability management, providing a pathway to advanced cybersecurity positions. Candidates should have a relevant degree and a passion for cybersecurity.

Qualifications

• 0-2 years of experience in IT or Cybersecurity operations.
• Industry certifications like CompTIA Security+ preferred.
• Basic knowledge of cybersecurity principles.

Responsibilities

• Support cybersecurity engineers in monitoring security platforms.
• Respond to Tier 1 security incidents and escalate as needed.
• Assist with identifying and validating vulnerabilities.

Skills

Network security fundamentals

Operating systems

Security incident and event monitoring

Basic scripting or query language skills

Attention to detail

Effective communication skills

Task management

Education

Diploma or Bachelor's degree in Information Technology

Diploma or Bachelor's degree in Cybersecurity

Diploma or Bachelor's degree in Computer Science

Tools

SIEM tools (e.g., Microsoft Sentinel)

Vulnerability scanners

Job description

Company Description

Aspen TESS is Aspen's technology-enabled shared services business, established to partner in unlocking business value through digital innovation and process efficiency. By delivering cost-effective services and innovative solutions to Aspen business units globally, Aspen TESS will eliminate repetitive effort and use technology to optimize standardized processes.

OBJECTIVE

The L1 Cybersecurity Analyst is an entry-level role within the Cybersecurity Operations team. This position is critical in supporting core security domains such as Vulnerability Management, Incident Response, Email and Internet Filtering, and Endpoint Security. The analyst will be responsible for performing daily operational security tasks, conducting routine system health checks, and responding to security incidents reported by the Security Operations Center (SOC). This role offers a growth opportunity into more advanced cybersecurity positions such as L2 Cybersecurity Analyst, SOC Analyst, or Cybersecurity Engineer, depending on performance and upskilling.

Below is a general description of the key responsibilities, qualifications, and skills needed for this role:

Key Responsibilities

Security Operations and Monitoring

• Support cybersecurity engineers in monitoring and maintaining the cybersecurity platforms.
• Perform daily system operational checks on security tools and infrastructure to ensure ongoing functionality and security posture.
• Monitor and report on phishing simulation outcomes to assess user awareness and improve training efforts.
  
  

Incident Response and Management

• Respond to Tier 1 security incidents and escalate complex cases to the respective business units for further investigation and closure.
• Aid in tracking the resolution of open security incidents and maintain accurate records within the incident management system.
• Document incidents, tasks, and operational processes accurately in ticketing systems to ensure traceability and knowledge sharing.
  
  

Vulnerability Management

• Assist with the identification and validation of vulnerabilities using tools like Qualys.
• Coordinate remediation efforts by working with appropriate teams to ensure timely resolution of identified vulnerabilities.
  
  

Compliance and Audit Support

• Collaborate with compliance teams to gather evidence for audits.
• Support internal security assessments by providing necessary documentation and assisting in the evaluation of controls.
  
  

SKILLS AND COMPETENCIES:

• Basic knowledge of: Network security fundamentals (firewalls, proxies, IP, DNS, etc.)
  
  

Operating systems (Windows, Linux) and endpoint security principles

Security incident and event monitoring (SIEM tools such as Microsoft Sentinel)

Familiarity with vulnerability scanners and CVSS scoring.

• Basic scripting or query language skills (e.g., PowerShell, KQL) — a plus.
• Excellent attention to detail and accuracy
• Effective verbal and written communication skills
• Ability to prioritize and manage multiple tasks
• Trustworthy and handles sensitive information with discretion
  
  

Qualifications & Experience

• Diploma or Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or related field (or equivalent practical experience)
• Industry certifications (preferred but not required):
• CompTIA Security+
• Microsoft SC-200 (Security Operations Analyst)
• Cisco CyberOps Associate
• Fortinet NSE1-NSE3 or equivalent
• 0-2 years of experience in IT or Cybersecurity operations
  
  

#NB