Information Security Analyst - Vulnerability Management

Placements24; Upington; Híbrido; ZAR 420.000 - 680.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Medical aid

Pension fund

Professional development & certs

Hybrid work arrangement

Modern vulnerability management tools

Descripción de la vacante

Placements24 is seeking an Information Security Analyst focused on Vulnerability Management to join our security operations team in Upington. You will identify, assess, and prioritize vulnerabilities across IT infrastructure and applications, coordinating remediation with IT teams in a hybrid work setting.

The ideal candidate has 3+ years in information security, hands-on scanning with Nessus/Qualys/InsightVM, and strong OS/network knowledge.

Formación

• Bachelor's degree in CS/IT/Cybersecurity or related field.
• Minimum 3 years in information security with vulnerability management.
• Hands-on experience with Nessus, Qualys, and Rapid7 InsightVM.
• Strong knowledge of Windows and Linux OS, networks, and vulnerabilities.
• Familiarity with patch management processes.
• Cloud knowledge (AWS, Azure) and related vulnerabilities is a plus.
• Security certifications (CompTIA Security+, CEH, GSEC) are advantageous.
• Eligibility to work in South Africa.

Responsabilidades

• Plan, execute, and manage vulnerability scanning activities across the organization's network and systems.
• Analyze vulnerability scan results, identifying critical and high-risk exposures.
• Prioritize vulnerabilities by severity, exploitability, and business impact.
• Collaborate with IT operations, system administrators, and development teams to ensure timely remediation of identified vulnerabilities.
• Track the progress of remediation efforts and verify the effectiveness of applied patches and fixes.
• Develop and maintain reports on the organization's vulnerability status and trends.
• Assist in the development and maintenance of vulnerability management policies and procedures.
• Stay current with emerging vulnerabilities, threats, and security best practices.
• Provide guidance and support to IT teams on vulnerability remediation techniques.
• Contribute to the continuous improvement of the vulnerability management program.

Conocimientos

Vulnerability management

Windows

Linux

Patch management

Cloud environments (AWS, Azure)

Analytical thinking

Communication skills

Security certifications advantageous

Educación

Bachelor's degree in Computer Science / Information Technology / Cybersecurity

Herramientas

Nessus

Qualys

Rapid7 InsightVM

Descripción del empleo

About the Role

Our client, a leading retail services provider, is seeking an Information Security Analyst with a focus on Vulnerability Management to join their security operations team. This role is responsible for identifying, assessing, and prioritizing vulnerabilities across the organization's IT infrastructure and applications, and coordinating remediation efforts. You will work with vulnerability scanning tools, analyze scan results, and collaborate with IT teams to ensure timely patching and mitigation. The position is based at our client's corporate office in Upington, Northern Cape , with a hybrid work arrangement. We are looking for a detail-oriented and proactive individual with a solid understanding of cybersecurity principles and vulnerability assessment methodologies. This is an excellent opportunity to contribute to the security posture of a major organization and grow your career in the cybersecurity field.

Key Responsibilities

• Plan, execute, and manage vulnerability scanning activities across the organization's network and systems.
• Analyze vulnerability scan results, identifying critical and high-risk exposures.
• Prioritize vulnerabilities based on severity, exploitability, and business impact.
• Collaborate with IT operations, system administrators, and development teams to ensure timely remediation of identified vulnerabilities.
• Track the progress of remediation efforts and verify the effectiveness of applied patches and fixes.
• Develop and maintain reports on the organization's vulnerability status and trends.
• Assist in the development and maintenance of vulnerability management policies and procedures.
• Stay current with emerging vulnerabilities, threats, and security best practices.
• Provide guidance and support to IT teams on vulnerability remediation techniques.
• Contribute to the continuous improvement of the vulnerability management program.

Requirements

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Minimum of 3 years of experience in information security, with a focus on vulnerability management or IT security operations.
• Hands-on experience with vulnerability scanning tools (e.g., Nessus, Qualys, Rapid7 InsightVM).
• Strong understanding of operating systems (Windows, Linux), network protocols, and common vulnerabilities.
• Familiarity with patch management processes and tools.
• Knowledge of cloud environments (AWS, Azure) and their associated vulnerabilities is a plus.
• Excellent analytical and problem-solving skills.
• Strong written and verbal communication skills, with the ability to document findings clearly and concisely.
• Ability to work independently and collaboratively with cross-functional teams.
• Relevant security certifications like CompTIA Security+, CEH, or GSEC are advantageous.
• Must be eligible to work in South Africa.

Benefits

• Our client offers a competitive salary, comprehensive medical aid, a pension fund, and opportunities for professional development and certifications.
• The Upington, Northern Cape office provides a supportive work environment.
• The hybrid work model allows for a healthy work-life balance.
• Employees benefit from access to modern vulnerability management tools and technologies.
• This role offers exposure to a wide range of IT infrastructure and security challenges, providing excellent learning opportunities.
• Our client is committed to employee growth and offers clear career progression paths within the cybersecurity department.
• Additional benefits include regular team events and wellness programs.
• The company fosters a culture of continuous improvement and values employee contributions to enhancing overall security.