Hybrid Security Operations Analyst - Defender & Sentinel

XContent Business Solutions (Pty) Ltd; Stellenbosch; Hybrid; ZAR 400,000 - 550,000; Full time

Job summary

A cybersecurity firm in Stellenbosch is seeking two Security Analysts to join their team in a hybrid role. This position focuses on hands-on security operations, requiring 2–4 years in security or IT, along with exposure to Microsoft security tools. Responsibilities include monitoring alerts, incident triage, and supporting security controls. Perfect for individuals ready to advance their careers within a comprehensive security operations landscape.

Qualifications

• 2–4 years in security operations or IT security.
• Experience with Microsoft security tools (Defender, Sentinel, or similar).
• Basic understanding of security fundamentals (endpoint, identity, cloud).

Responsibilities

• Monitor and respond to alerts across the Defender suite.
• Perform incident triage and escalate where necessary.
• Support Sentinel operations and incident handling.
• Assist with vulnerability management and remediation.
• Contribute to reporting and operational metrics.
• Participate in incident response processes.

Skills

Monitoring and responding to alerts

Incident triage

Exposure to Microsoft security tools

Understanding of security fundamentals

Willingness to learn

Tools

Microsoft Defender

Microsoft Sentinel

Job description

We are looking for two Security Analysts to join our team in Stellenbosch (hybrid).

This role is focused on hands-on security operations. You will work across Microsoft Defender, Sentinel, and Azure security environments, supporting monitoring, investigation, and response activities.

Our approach is Microsoft-first and aligned with Zero Trust principles, giving you exposure to security practices relevant to most enterprise environments today.

You will gain exposure across endpoint, identity, cloud, and SIEM while working alongside senior analysts who will guide your development.

What you will be doing:

• Monitoring and responding to alerts across the Defender suite
• Performing incident triage and escalating where needed
• Supporting Sentinel operations and incident handling
• Assisting with vulnerability management and remediation tracking
• Supporting email, identity, and endpoint security controls
• Contributing to reporting and operational metrics
• Participating in incident response processes and standby rotation

What we are looking for:

• 2–4 years in security operations or IT security
• Exposure to Microsoft security tools (Defender, Sentinel, or similar)
• Understanding of security fundamentals (endpoint, identity, cloud)
• Willingness to learn and grow in a structured environment

Summary:

If you are looking to move beyond basic monitoring into a more comprehensive security operations role, this position will provide that exposure.

To Apply: Send your cover letter and CV to: [e-mail]

NO APPLICANTS VIA LINKEDIN WILL BE CONSIDERED