Incident Response Analyst

S-Rm; Cape Town; On-site; ZAR 40 000 - 80 000; Full time

Job summary

An established industry player is seeking an Incident Response Analyst to join their dynamic Cyber Security division. In this pivotal role, you will manage the full lifecycle of security incidents, ensuring timely responses and effective recovery strategies for clients. You will collaborate with technical leads and stakeholders, develop incident management plans, and contribute to business development efforts. With a focus on professional growth, this position offers a variety of casework and opportunities to expand your security skills. If you thrive in high-pressure environments and have a passion for cybersecurity, this role is perfect for you.

Benefits

Flexible Working Practices

Work/Life Balance Support

Professional Development Opportunities

Qualifications

• Experience managing cyber incidents in high-pressure situations.
• Strong project management skills with stakeholder management experience.

Responsibilities

• Manage incident response cases from first contact to closure.
• Oversee investigations including triage, recovery, and forensics.

Skills

Incident Management

Project Management

Stakeholder Management

Cybersecurity Expertise

Education

Tertiary Education

Relevant Industry Experience

Tools

Forensics Tools

Incident Response Software

Job description

Join or Sign In to Find Your Next Job

Apply for the Incident Response Analyst role at S-RM. Our Incident Response Senior Analysts are vital to our Cyber Security division's success.

You will work across the full lifecycle of security incidents to help our clients respond and recover, including:

1. Manage incident response cases from first contact to closure: act as the primary contact for stakeholders, ensuring timely and budgeted delivery, coordinating non-technical workstreams, and collaborating with technical leads.
2. Oversee host- and network-based investigations: including triage, system recovery, evidence collection, forensics, and root cause analysis.
3. Develop plans, policies, and training: such as incident management plans, tabletop exercises, and response procedures.
4. Share domain expertise: grow your cyber expertise and share it internally through initiatives and programs.
5. Contribute to business development: build and maintain relationships with legal, insurance, and other partners.
6. Participate in an on-call rotation: providing 24/7 incident coverage.

Additional features include:

• Variety of casework: no two days are the same, with incidents for both public and corporate clients.
• Range of opportunities: expand your security skills into testing and advisory projects.
• Flexible working practices: we support work/life balance with flexible options, recognizing the high-pressure nature of incident response.

What we're looking for

Candidates with the following qualifications and experience are likely to succeed:

• Experience managing cyber incidents in high-pressure situations
• Strong project management skills with stakeholder management experience
• Ability to present updates and reports to non-technical stakeholders
• Tertiary education or relevant industry experience
• Relevant certifications (e.g., GCFE, GCFA, CISSP, etc.)

Certifications are beneficial but not required.

Additional details

Seniority level: Mid-Senior level

Employment type: Full-time

Job function: Management and Manufacturing

Industries: Security and Investigations