Senior Security Analyst

Sabenza IT & Recruitment; Cape Town; On-site; ZAR 700,000 - 1,100,000; Full time

Job summary

Sabenza IT & Recruitment in Cape Town seeks a Senior Security Analyst to own Security Operations, Cloud Security, Vulnerability Management, Security Engineering and GRC initiatives. You will contribute to DevSecOps, incident response and threat investigation in a high-performing tech environment.

The role requires strong Azure, M365, Entra ID and AD experience, plus hands-on security monitoring, risk reporting and drive for Zero Trust in regulated contexts.

Qualifications

• 7+ years ICT experience including 5+ years in cybersecurity.
• Strong enterprise security technology experience.
• Proven incident response, threat investigation and vulnerability management.
• Extensive Azure, Microsoft 365, Entra ID and Active Directory experience.
• Experience securing cloud platforms in regulated environments.
• Knowledge of firewalls, IDS/IPS, VPN, segmentation and ZTNA.
• Scripting with PowerShell, Python, Bash and REST APIs.
• Experience with Defender, PAM, EDR, DLP and security monitoring tools.

Responsibilities

• Oversee Security Operations across cloud, endpoints, networks and apps.
• Perform threat hunting, incident response and root-cause analysis.
• Enhance SIEM capabilities, playbooks and security monitoring.
• Manage vulnerability scanning and risk-based remediation coordination.
• Produce vulnerability and risk reporting.
• Design and implement security controls across Azure, Windows and Linux.
• Support Zero Trust initiatives and secure DevSecOps practices.
• Conduct cybersecurity risk assessments and support audits and compliance.

Skills

Threat hunting

Incident response

Vulnerability management

Cloud security

Security monitoring

Zero Trust

Automation scripting

Education

Matric

Degree / National Diploma

Tools

Azure

Microsoft 365

Entra ID

Active Directory

PowerShell

Python

Bash

REST APIs

Microsoft Defender

EDR

PAM

DLP

Job description

Cape Town, South Africa

Cape Town is calling… and no, this isn’t another job where “cybersecurity” means resetting passwords.

We’re looking for an experienced Senior Security Analyst to join a high-performing technology environment and take ownership across Security Operations, Cloud Security, Vulnerability Management, Security Engineering, GRC and DevSecOps .

If you know your Microsoft Defender from your Microsoft Teams, can investigate a real security incident, and understand that “Zero Trust” is more than a buzzword, this one’s for you.

What you’ll be doing

Security Operations

• Monitor and investigate security events across cloud, endpoints, networks and applications.


• Perform threat hunting, incident response and root-cause analysis.


• Enhance SIEM capabilities, playbooks and security monitoring.

Vulnerability Management

• Manage vulnerability scanning and risk-based prioritization.


• Coordinate remediation with ICT teams and validate fixes.


• Produce vulnerability and risk reporting.

Security Engineering & Cloud

• Design and implement security controls across Azure, Microsoft 365, Entra ID, Windows, Linux and DevOps.


• Implement MFA, PAM, EDR, DLP and security automation.


• Secure Azure environments, conduct cloud assessments and support Zero Trust initiatives.

GRC & Security Architecture

• Conduct cybersecurity risk assessments and maintain risk registers.


• Support audits, policies and compliance requirements including POPIA and CIS Controls.


• Review security designs and define secure architecture standards and baselines.


• Support secure development, code scanning and security testing.


• Help development teams remediate security vulnerabilities.


• Drive security awareness, training and organizational cyber resilience.

What you’ll need

• 7+ years ICT experience, including 5+ years in cybersecurity.


• Strong enterprise security technology experience.


• Proven experience in incident response, threat investigation and vulnerability management.


• Strong Azure, Microsoft 365, Entra ID and Active Directory experience.


• Experience securing cloud platforms and working in regulated environments.


• Strong knowledge of firewalls, IDS/IPS, VPN, segmentation and ZTNA.


• Scripting and automation skills using PowerShell, Python, Bash and REST APIs.


• Experience with Microsoft Defender, PAM, EDR, DLP, vulnerability management and security monitoring tools.

Qualifications & certifications

• Minimum: Matric
  


• A relevant Degree/National Diploma.


• CISSP, CISM, Security+, AZ-500 or Microsoft Security Certifications.