Senior Cyber Security Analyst

60 Degrees; Wes-Kaap; Remote; ZAR 600 000 - 800 000; Full time

Job summary

A cyber security firm in South Africa is seeking a Senior Cyber Security Analyst to manage and mitigate cyber threats across client environments. The role entails monitoring systems, conducting investigations, and mentoring junior analysts. Applicants should have at least 4 years of experience in cyber security and possess various skills in communication and problem-solving. Industry certifications are required. The position offers a chance to work with global clients while enhancing security operations.

Responsibilities

• Monitor client environments/security systems for alerts/incidents.
• Conduct in-depth investigations on security events.
• Develop and implement automation and remediation processes.
• Lead threat hunting investigations.

Skills

Communication and interpersonal skills

Time management

Networking knowledge

Problem solving

Passion for security

Education

Industry standard certifications (Microsoft, CompTIA, etc.)

Tools

SIEM

SOAR

EDR

Microsoft Sentinel

Kusto Query Language (KQL)

Job description

Job Description: Senior Cyber Security Analyst

Role: Senior Cyber Security Analyst

Company: Opliciti South Africa (Pty) Ltd

Geographical responsibility: Global

Reports to: Matrix management reporting to: Managing Director RSA, Head of Security Operations UK

Job Purpose The Senior Security Analyst is a core member of the SOC, responsible for detecting, investigating, and mitigating cyber threats across complex client environments. Utilising modern tools and expertise, the analyst conducts advanced investigations, enhances detection capabilities, and promotes ongoing improvements in incident response and threat hunting. This role combines deep technical expertise with strategic oversight—enhancing monitoring, automation, and defence capabilities while mentoring junior analysts. The analyst also stays informed of emerging threats and vulnerabilities, ensuring clients in critical sectors remain protected against evolving attack vectors.

Job Interactions Internally: Interacts with the professional services teams, security operations teams and company Directors. Externally: Engages with clients for escalations, investigations and service reviews, and supports business development through technical insights, pre-sales consultations, and solution alignment.

Job Responsibilities

• Monitor client environments/security systems as part of a dedicated security team or a shared services security team for alerts/incidents, analyse logs and traffic patterns, providing appropriate response in accordance with processes agreed with in contractual terms i.e. Service Description.
• Provide support where required, to multiple customer environments concurrently; drive customer satisfaction and continuously seek to improve operational performance.
• Work with internal and external client stakeholders to conduct in-depth investigations on security events, raise incidents, contain and provide remediation and/or recommendations supporting the incident management process.
• Act as an escalation point for any incidents and investigations that may be required.
• Develop and understanding of client environment and requirements, build relationships with relevant stakeholders to provide effective communication through support channels.
• Understand and apply use-cases and develop playbooks enabling efficiency, improvements.
• Develop and implement automation, notification, response and remediation processes.
• Lead threat hunting investigations and apply any new feeds and sources relevant to detecting threats to the client.
• Contribute to, and help in development of, security Dashboards/Reporting and processes.
• Stay up to date and regularly educate team on the changing cyber security landscape and share information.
• Support the ongoing maintenance of the company’s Information Security Management System (ISMS)
• Be able to optimise workstreams beyond BAU and assigned tasks, such as identifying enhancements and opportunities for continuous improvement.

Skills and Experience

Essential

• To have a passion for security and rise to challenges.
• Possess excellent communication, interpersonal and good leadership skills.
• Good time management and ability to solve problems and manage different workloads.
• Sufficient networking knowledge with the ability to understand network traffic, to be able to explain activity and advise next steps.
• Minimum 4 years of experience working as a Cyber Security Analyst or equivalent.
• Experience working in a SOC environment with tools as SIEM, SOAR, EDR etc.
• Experience with Azure, Microsoft Sentinel and the Microsoft Security stack.
• Proficiency in Kusto Query Language (KQL) and comfortable developing queries for detection and reporting.
• Experienced with development of playbooks and applied automation for efficient workflows.
• Comprehensive understanding of common malware types along with detection and prevention methods.
• Understanding of Cloud computing/architecture and security.
• Good awareness and understanding of the MITRE ATT&CK Framework.
• Solid understanding of the different stages of the Cyber-Kill-Chain.
• Be able to interact comfortably with stakeholders across multiple organisations, building strong relationships across all business units at all levels.

Desirable

• Prior experience in an MSSP delivering security services to multiple clients.
• Experience with multiple SIEM Technologies (Splunk, MS Sentinel, LogRhythm, ELK, QRadar, Arcsight, Wazuh etc.)
• Experience with cloud platforms such as AWS and GCP.
• Experience with high-profile enterprise clients e.g. – Oil & Gas, Manufacturing, Supply Chain etc.
• Experience with using Microsoft Logic Apps/Power Automate or third-party orchestration tools.
• Experience with PowerBI and developing visualisations via custom queries.

Qualifications

At least one or more of the following: Industry standard certifications such as Microsoft, CompTIA, SANS, CREST, GIAC, ISC2 and or any other cyber security relation certifications.