Senior Information Security Analyst - Vulnerability Management

Placements24; Pietermaritzburg; Hybrid; ZAR 900.000 - 1.300.000; Vollzeit

Benefits dieser Stelle

Fully remote

Competitive salary

Medical insurance

Generous leave

Development budget

Cutting-edge tools

Zusammenfassung

Placements24 is seeking a Senior Information Security Analyst specializing in Vulnerability Management. This fully remote role targets candidates in South Africa, with close alignment to the Pietermaritzburg security program.

You will lead vulnerability scanning, risk-based prioritization, and remediation across IT infrastructure and cloud environments. You will partner with IT operations, development, and security teams to implement policies, track progress, and stay ahead of emerging threats.

Jobbeschreibung

About the Role

Our client, a global leader in software development, is seeking a highly motivated Senior Information Security Analyst specializing in Vulnerability Management. This role is crucial for proactively identifying, assessing, and remediating security vulnerabilities across the company's extensive IT infrastructure and applications. You will be responsible for managing the vulnerability scanning program, prioritizing vulnerabilities based on risk, and collaborating with IT teams to ensure timely remediation. This position is a fully remote opportunity, offering the flexibility to work from anywhere within South Africa. The ideal candidate is detail-oriented, possesses strong analytical skills, and has a comprehensive understanding of security risks and mitigation strategies. This role contributes directly to strengthening our client's security posture and protecting sensitive data from potential breaches. While the role is remote, it operates in close coordination with the strategic direction and operational framework associated with our client's presence in Pietermaritzburg, KwaZulu-Natal , ensuring alignment with organizational security goals.

Key Responsibilities

• Manage and operate the enterprise vulnerability scanning program, including configuration, scheduling, and maintenance of scanning tools.
• Conduct comprehensive vulnerability assessments of networks, systems, applications, and cloud environments.
• Analyze scan results to identify and prioritize vulnerabilities based on potential impact and exploitability.
• Collaborate closely with IT operations, development, and system administration teams to drive the timely remediation of identified vulnerabilities.
• Develop and maintain vulnerability management policies, standards, and procedures.
• Track and report on the progress of vulnerability remediation efforts to management and relevant stakeholders.
• Stay informed about emerging threats, vulnerabilities, and new scanning techniques.
• Assist in the development and execution of penetration testing activities.
• Provide expert guidance on secure configuration practices and vulnerability mitigation strategies.
• Contribute to the enhancement of security tools and processes related to vulnerability management.
• Maintain accurate records of scan results, remediation activities, and compliance status.
• Participate in security incident response efforts as needed.

Requirements

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• Minimum of 4 years of experience in information security, with a significant focus on vulnerability management.
• Proven experience with enterprise vulnerability scanning tools (e.g., Qualys, Nessus, Rapid7 Nexpose).
• Strong understanding of common vulnerabilities (e.g., OWASP Top 10), CVEs, and risk assessment methodologies.
• Experience in prioritizing vulnerabilities based on CVSS scoring and business context.
• Knowledge of network protocols, operating systems, and web application security.
• Familiarity with scripting languages (e.g., Python, PowerShell) for automation is advantageous.
• Excellent analytical, problem-solving, and organizational skills.
• Strong communication and collaboration skills, especially for remote teamwork.
• Ability to work independently, manage workload, and meet deadlines.
• Relevant security certifications such as CompTIA Security+, CEH, or specific vendor certifications are a plus.
• Must be legally authorized to work in South Africa and comfortable with remote work.

Benefits

• Fully remote work arrangement with significant flexibility.
• Competitive salary package and potential for bonuses.
• Comprehensive medical and health insurance.
• Generous annual leave and paid time off.
• Budget for professional development, training, and certifications.
• Opportunity to work with cutting-edge vulnerability management technologies.
• Engaging and impactful role in safeguarding a global software company.
• Supportive and collaborative remote team environment.