L1 Cybersecurity Analyst

Aspen Pharma Group; Johannesburg; On-site; ZAR 300 000 - 400 000; Full time

Job summary

A pharmaceutical company in Johannesburg is seeking an L1 Cybersecurity Analyst to support core security domains such as Vulnerability Management and Incident Response. This entry-level role involves daily operational security tasks and offers potential progression to advanced cybersecurity positions. Ideal for candidates with a diploma in IT or Cybersecurity and basic industry knowledge, providing an excellent growth opportunity.

Qualifications

• Minimum of 0-2 years of experience in IT or Cybersecurity operations.
• Possession of industry certifications is preferred but not required.

Responsibilities

• Support monitoring and maintaining cybersecurity platforms.
• Perform daily operational checks on security tools.
• Respond to Tier 1 security incidents.

Skills

Network security fundamentals

Operating systems (Windows, Linux)

Security incident and event monitoring

Familiarity with vulnerability scanners

Basic scripting skills (e.g. PowerShell)

Attention to detail

Effective communication skills

Ability to manage multiple tasks

Education

Diploma or Bachelor's degree in IT, Cybersecurity, or related field

CompTIA Security+

Tools

SIEM tools (Microsoft Sentinel)

Vulnerability scanning tools (Qualys)

Job description

Company Description

Aspen TESS is Aspen's technology-enabled shared services business, established to partner in unlocking business value through digital innovation and process efficiency. By delivering cost-effective services and innovative solutions to Aspen business units globally, Aspen TESS will eliminate repetitive effort and use technology to optimize standardized processes.

OBJECTIVE

The L1 Cybersecurity Analyst is an entry-level role within the Cybersecurity Operations team. This position is critical in supporting core security domains such as Vulnerability Management, Incident Response, Email and Internet Filtering, and Endpoint Security. The analyst will be responsible for performing daily operational security tasks, conducting routine system health checks, and responding to security incidents reported by the Security Operations Center (SOC). This role offers a growth opportunity into more advanced cybersecurity positions such as L2 Cybersecurity Analyst, SOC Analyst, or Cybersecurity Engineer, depending on performance and upskilling.

Below is a general description of the key responsibilities, qualifications, and skills needed for this role:

Key Responsibilities

Security Operations and Monitoring

• Support cybersecurity engineers in monitoring and maintaining the cybersecurity platforms.
• Perform daily system operational checks on security tools and infrastructure to ensure ongoing functionality and security posture.
• Monitor and report on phishing simulation outcomes to assess user awareness and improve training efforts.

Incident Response and Management

• Respond to Tier 1 security incidents and escalate complex cases to the respective business units for further investigation and closure.
• Aid in tracking the resolution of open security incidents and maintain accurate records within the incident management system.
• Document incidents, tasks, and operational processes accurately in ticketing systems to ensure traceability and knowledge sharing.

Vulnerability Management

• Assist with the identification and validation of vulnerabilities using tools like Qualys.
• Coordinate remediation efforts by working with appropriate teams to ensure timely resolution of identified vulnerabilities.

Compliance and Audit Support

• Collaborate with compliance teams to gather evidence for audits.
• Support internal security assessments by providing necessary documentation and assisting in the evaluation of controls.

SKILLS AND COMPETENCIES

• Basic knowledge of: Network security fundamentals (firewalls, proxies, IP, DNS, etc.)
• Operating systems (Windows, Linux) and endpoint security principles
• Security incident and event monitoring (SIEM tools such as Microsoft Sentinel)
• Familiarity with vulnerability scanners and CVSS scoring.
• Basic scripting or query language skills (e.g., PowerShell, KQL) — a plus.
• Excellent attention to detail and accuracy
• Effective verbal and written communication skills
• Ability to prioritize and manage multiple tasks
• Trustworthy and handles sensitive information with discretion

Qualifications & Experience

• Diploma or Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or related field (or equivalent practical experience)
• Industry certifications (preferred but not required):
• CompTIA Security+
• Microsoft SC-200 (Security Operations Analyst)
• Cisco CyberOps Associate
• Fortinet NSE1-NSE3 or equivalent
• 0-2 years of experience in IT or Cybersecurity operations