Information Security Analyst - Vulnerability Management

Placements24; LegKraal Gate; Hybrid; ZAR 600,000 - 900,000; Full time

Benefits offered by this job

Competitive salary

Professional development

Paid time off

Holidays

Job summary

Placements24 is seeking a proactive Information Security Analyst in Mahikeng, North West to join our security operations team. You will identify, assess, and prioritize vulnerabilities across IT infrastructure and applications, using industry-standard tools to drive remediation.

The ideal candidate has 2-4 years in security, hands-on with Nessus/Qualys/Nexpose, knowledge of Windows and Linux, and strong analytical skills. Certifications like Security+, CySA+, or CEH are advantageous.

Qualifications

• Bachelor's degree in CS/IT/Cybersecurity or equivalent experience.
• 2-4 years in information security focusing on vulnerability management or security operations.
• Hands-on with vulnerability scanners such as Nessus, Qualys, Nexpose or similar.
• Understanding of Windows and Linux operating systems and network protocols.
• Familiarity with CIS Benchmarks and OWASP.
• Strong analytical and communication skills; ability to work with technical and non-technical teams.
• Certifications such as CompTIA Security+, CySA+, or CEH are beneficial.

Responsibilities

• Conduct regular vulnerability scans of networks, servers, applications and endpoints.
• Analyze scan results, identify false positives, and assess severity and impact.
• Prioritize vulnerabilities based on risk, exploitability and business impact.
• Collaborate with IT operations, development and system administration to remediate vulnerabilities.
• Develop and maintain reports on vulnerability status, remediation progress and KPIs.
• Assist in configuring and managing vulnerability scanning tools and platforms.
• Stay informed about latest vulnerabilities, exploits and threat intelligence.
• Participate in security incident response activities as needed.
• Contribute to vulnerability management policies and procedures.

Skills

Vulnerability management

Security operations

Analytical skills

PowerShell

Python

Education

Bachelor's degree in Computer Science / Information Technology / Cybersecurity

Tools

Nessus

Qualys

Rapid7 Nexpose

Windows

Linux

Job description

About the Role

Our client is seeking a proactive and detail-oriented Information Security Analyst with a focus on Vulnerability Management to join their security operations team in Mahikeng, North West . This critical role involves identifying, assessing, and prioritizing vulnerabilities across the organization's IT infrastructure and applications. You will work with cutting-edge tools to conduct scans, analyze results, and collaborate with IT teams to ensure timely remediation of identified risks. The successful candidate will play a key part in strengthening the organization's defenses against cyber threats. This position offers a challenging and rewarding opportunity to contribute to a robust security program within a growing company. We are looking for an individual with strong analytical skills and a methodical approach to identifying and managing security weaknesses.

Key Responsibilities

• Conduct regular vulnerability scans of networks, servers, applications, and endpoints using industry-standard tools.
• Analyze scan results, identify false positives, and accurately assess the severity and impact of identified vulnerabilities.
• Prioritize vulnerabilities based on risk, exploitability, and business impact.
• Collaborate with IT operations, development, and system administration teams to track and ensure timely remediation of vulnerabilities.
• Develop and maintain reports on vulnerability status, remediation progress, and key performance indicators (KPIs).
• Assist in the configuration and management of vulnerability scanning tools and platforms.
• Stay informed about the latest vulnerabilities, exploits, and threat intelligence relevant to the organization's environment.
• Participate in security incident response activities as needed.
• Contribute to the development and refinement of vulnerability management policies and procedures.
• Provide technical guidance on secure configurations and best practices to other IT teams.

Requirements

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent practical experience.
• Minimum of 2-4 years of experience in information security, with a focus on vulnerability management or security operations.
• Hands-on experience with vulnerability scanning tools such as Nessus, Qualys, Rapid7 Nexpose, or similar.
• Understanding of common operating systems (Windows, Linux) and network protocols.
• Familiarity with security frameworks and best practices (e.g., CIS Benchmarks, OWASP).
• Strong analytical and problem-solving skills, with the ability to interpret complex data.
• Excellent communication and interpersonal skills, with the ability to collaborate effectively with technical and non-technical teams.
• Experience in scripting (e.g., PowerShell, Python) for automating tasks is a plus.
• Ability to manage multiple tasks and prioritize effectively in a dynamic environment.
• Relevant security certifications such as CompTIA Security+, CySA+, or CEH are beneficial.

Benefits

• Competitive salary and benefits package.
• Opportunities for professional development and training.
• Generous paid time off and company holidays.
• A collaborative and supportive team environment in Mahikeng, North West .
• Work with modern security technologies and contribute to critical security initiatives.
• Career growth opportunities within the information security field.
• Be part of a team dedicated to proactive threat mitigation.