Information Security Specialist - Vulnerability Management

Placements24; Soweto; Hybrid; ZAR 600,000 - 900,000; Full time

Job summary

Placements24 seeks an Information Security Specialist (Vulnerability Management) for a hybrid role in Soweto. The candidate will identify, assess, and prioritize vulnerabilities across the IT estate, coordinating remediation with IT teams to strengthen security controls.

The ideal candidate has 4+ years in information security, hands-on vulnerability scanning experience (Nessus/Qualys/Rapid7), and strong analytical and communication skills. ABlend of on-site and remote work is offered.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or related field.
• Minimum 4 years in information security with focus on vulnerability management.
• Hands-on experience with vulnerability scanning tools (Nessus, Qualys, Rapid7).
• Strong understanding of network protocols, Windows/Linux, and common vulnerabilities.
• Excellent analytical, problem-solving, and communication skills.

Responsibilities

• Conduct regular vulnerability scans of servers, networks, and applications.
• Analyze scan results and prioritize remediation by risk.
• Coordinate remediation plans with IT operations and admins.
• Validate remediation by re-scanning and testing.
• Maintain asset inventory and vulnerability records.
• Develop and maintain vulnerability management policies and metrics.
• Stay informed on emerging threats and scanning techniques.
• Generate reports on vulnerability posture for management.
• Assist in implementing security controls to prevent vulnerabilities.
• Contribute to security awareness training.

Skills

Vulnerability assessment

Analytical thinking

Communication

Hybrid work experience

Education

Bachelor's degree in CS/InfoSec

Security certifications (CompTIA Security+, CEH, GIAC)

Tools

Nessus

Qualys

Rapid7

Job description

About the Role

Our client, a large public sector entity operating within Soweto , is seeking a skilled Information Security Specialist focused on Vulnerability Management. This vital role involves identifying, assessing, and prioritizing security vulnerabilities across the organization's IT infrastructure. You will be responsible for coordinating remediation efforts and ensuring that security risks are effectively managed. The successful candidate will be detail-oriented, possess strong technical skills in vulnerability assessment tools, and understand the importance of proactive security measures. This position offers a hybrid work model, balancing on-site engagement in Soweto with remote flexibility. Join a team dedicated to strengthening the security posture of critical public services and making a tangible difference in the community. The role requires a proactive approach to identifying and mitigating risks within the Gauteng region.

Key Responsibilities

• Conduct regular vulnerability scans and assessments of servers, networks, and applications.
• Analyze scan results, identify false positives, and prioritize vulnerabilities based on risk.
• Work closely with IT operations and system administrators to develop and track remediation plans.
• Validate the effectiveness of remediation efforts through re-scanning and testing.
• Maintain accurate inventory of all assets and their associated vulnerabilities.
• Develop and maintain vulnerability management policies, procedures, and metrics.
• Stay informed about emerging threats, vulnerabilities, and new scanning techniques.
• Generate regular reports on the organization's vulnerability posture for management.
• Assist in the development and implementation of security controls to prevent future vulnerabilities.
• Contribute to security awareness training by highlighting common vulnerabilities.

Requirements

• Bachelor's degree in Computer Science, Information Security, or a related field; relevant certifications like CompTIA Security+, CEH, or GIAC certifications are highly valued.
• Minimum of 4 years of experience in information security, with a specific focus on vulnerability management.
• Hands-on experience with vulnerability scanning tools (e.g., Nessus, Qualys, Rapid7).
• Strong understanding of network protocols, operating systems (Windows, Linux), and common security vulnerabilities.
• Proficiency in analyzing scan reports and prioritizing remediation efforts.
• Excellent analytical, problem-solving, and communication skills.
• Ability to effectively collaborate with IT teams and other stakeholders.
• Experience working in a hybrid work environment.
• Familiarity with IT asset management principles.
• Demonstrated ability to work independently and manage tasks efficiently.

Benefits

Our client offers a competitive salary, comprehensive benefits including medical aid and pension fund, opportunities for professional growth and certifications, and a stable work environment. Be a key part of protecting essential services in Soweto and contribute to a safer digital future. This hybrid role provides a strong foundation for career development within information security.