Security Analyst

Prime System Solutions; Johannesburg; On-site; ZAR 900,000 - 1,500,000; Full time

Job summary

Prime System Solutions seeks a seasoned Security Analyst to secure client networks, manage firewall and cloud security, and oversee MSP onboarding/offboarding. You will design LAN/WAN architectures, conduct audits, and monitor security using SIEM tools across a multi-client environment.

Requirements include 8–12 years in network security, CCNP Security, and ITIL/ISO27001 knowledge, with hands-on cloud and RMM experience. Expect demanding, multi-client engagements in a global MSP setting.

Qualifications

• 8-12 years of hands-on experience in network infrastructure, NOC operations, and cybersecurity.
• Proficiency with firewalls: Cisco ASA, FTD, Fortinet FG Series, SonicWall, and NetScaler.
• Strong networking skills: Cisco Routers & Switches, Nexus, Meraki, Ubiquiti, Arista.
• Hands-on experience with RMM tools: Datto RMM, Kaseya, NinjaOne, ConnectWise, or equivalent.
• Experience with cloud platforms: Microsoft Azure, AWS, and/or Google Cloud Platform.
• Solid understanding of ITIL frameworks and ISO 27001 security standards.
• Strong command over routing protocols: OSPF, EIGRP, BGP, MPLS, and IPSec VPNs.
• Experience with MSP environments and managing multi-client infrastructure.
• CCNP Security (or equivalent) certification.
• Bachelor's degree in Computer Engineering, Computer Science, or a related field.

Responsibilities

• Design, implement, and manage secure LAN/WAN network architectures for enterprise and MSP clients.
• Conduct firewall audits, vulnerability assessments, and infrastructure hardening across client environments.
• Perform real-time security monitoring using SIEM tools and respond to alerts and incidents proactively.
• Manage and troubleshoot NGFW devices and enforce security policies.
• Oversee client onboarding and offboarding processes including system configuration, access provisioning/decommissioning, and documentation handover.
• Configure and support cloud platforms including Microsoft Azure, AWS, and Google Cloud Platform for client security posture.
• Administer Microsoft 365 environments - user provisioning, Exchange Online, licensing, and security configurations.
• Deploy and manage monitoring and security tools such as SolarWinds, Nagios XI, Auvik, Cisco OpenDNS, Datto RMM, NinjaOne, and Dark Web Monitoring.
• Configure Layer 2/3 networking including VLANs, STP, OSPF, EIGRP, BGP, QoS, IPSec VPNs, and MPLS.
• Implement AAA, MFA, IDS/IPS, and RADIUS solutions to secure network access.
• Contribute to ISO 27001 compliance initiatives and maintain ITIL-aligned change management processes.
• Design and document disaster recovery plans for network and server infrastructure.
• Manage Microsoft Server environments (AD, DNS, DHCP, RDS) and virtualization platforms.
• Produce detailed technical reports and ensure compliance with contractual and regulatory requirements.

Skills

Firewall management

Threat detection

Cloud security

MSP operations

NOC operations

Networking

RMM tools

Azure

AWS

Google Cloud

Cisco

Nexus

Meraki

Ubiquiti

Arista

ISO 27001

ITIL

CCNP Security

Datto RMM

Kaseya

NinjaOne

ConnectWise

Education

Bachelor's degree in Computer Engineering

Bachelor's degree in Computer Science

Tools

Datto RMM

Kaseya

NinjaOne

ConnectWise

Job description

We are looking for a seasoned Security Analyst with deep expertise in network infrastructure, cybersecurity, and MSP operations. The ideal candidate will have a strong background in firewall management, threat detection, cloud security, and client onboarding/offboarding. You will play a pivotal role in securing client environments, ensuring compliance, and driving operational excellence across our global client base.

KEY RESPONSIBILITIES

• Design, implement, and manage secure LAN/WAN network architectures for enterprise and MSP clients.
• Conduct firewall audits, vulnerability assessments, and infrastructure hardening across client environments (Cisco ASA, FTD, Fortinet, SonicWall).
• Perform real-time security monitoring using SIEM tools and respond to alerts and incidents proactively.
• Manage and troubleshoot Next-Generation Firewall (NGFW) devices and enforce security policies.
• Oversee client onboarding and offboarding processes including system configuration, access provisioning/decommissioning, and documentation handover.
• Configure and support cloud platforms including Microsoft Azure, AWS, and Google Cloud Platform for client security posture.
• Administer Microsoft 365 environments - user provisioning, Exchange Online, licensing, and security configurations.
• Deploy and manage monitoring and security tools such as SolarWinds, Nagios XI, Auvik, Cisco OpenDNS, Datto RMM, NinjaOne, and Dark Web Monitoring.
• Configure Layer 2/3 networking including VLANs, STP, OSPF, EIGRP, BGP, QoS, IPSec VPNs, and MPLS.
• Implement AAA, MFA, IDS/IPS, and RADIUS solutions to secure network access.
• Contribute to ISO 27001 compliance initiatives and maintain ITIL-aligned change management processes.
• Design and document disaster recovery plans for network and server infrastructure.
• Manage Microsoft Server environments (AD, DNS, DHCP, RDS) and virtualization platforms.
• Produce detailed technical reports and ensure compliance with contractual and regulatory requirements.

MUST HAVE

• 8-12 years of hands-on experience in network infrastructure, NOC operations, and cybersecurity.
• Proficiency with firewalls: Cisco ASA, FTD, Fortinet FG Series, SonicWall, and NetScaler.
• Strong networking skills: Cisco Routers & Switches, Nexus, Meraki, Ubiquiti, and Arista.
• Hands-on experience with RMM tools: Datto RMM, Kaseya, NinjaOne, ConnectWise, or equivalent.
• Experience with cloud platforms: Microsoft Azure, AWS, and/or Google Cloud Platform.
• Solid understanding of ITIL frameworks and ISO 27001 security standards.
• Strong command over routing protocols: OSPF, EIGRP, BGP, MPLS, and IPSec VPNs.
• Experience with MSP environments and managing multi-client infrastructure.
• CCNP Security (or equivalent) certification.
• Bachelor's degree in Computer Engineering, Computer Science, or a related field.

NICE TO HAVE

• CCIE (Written or Lab) or CCIE Security Bootcamp completion.
• AWS Certified Solutions Architect - Associate or equivalent cloud certification.
• Experience with SIEM platforms such as AlienVault or similar tools.
• Exposure to telecom technologies: GPON, MSAN, IPTV, Huawei U2000, or Alcatel AMS.
• Experience with wireless infrastructure: UniFi APs and Controllers.
• Familiarity with virtualization platforms (ESXi, Hyper-V) and Ubuntu/Linux server administration.
• Prior experience in healthcare IT or data center environments.