Senior Security Analyst

Sabenza IT & Recruitment; Eersterivier; On-site; ZAR 900,000 - 1,500,000; Full time

Job summary

Sabenza IT & Recruitment seeks an experienced Senior Security Analyst to lead across Security Operations, Cloud Security, Vulnerability Management, Security Engineering, GRC and DevSecOps in a Cape Town environment.

You will use Microsoft Defender, Azure, Entra ID and Active Directory to investigate incidents, implement Zero Trust initiatives and drive security resilience in an enterprise setting.

Qualifications

• 7+ years ICT experience; 5+ years in cybersecurity.
• Experience with incident response, threat investigation and vulnerability management.
• Strong Azure, Microsoft 365, Entra ID and Active Directory experience.
• Experience securing cloud platforms and working in regulated environments.

Responsibilities

• Monitor and investigate security events across cloud, endpoints, networks and applications.
• Perform threat hunting, incident response and root-cause analysis.
• Enhance SIEM capabilities, playbooks and security monitoring.
• Manage vulnerability scanning and risk-based prioritization.
• Coordinate remediation with ICT teams and validate fixes.
• Produce vulnerability and risk reporting.
• Design and implement security controls across Azure, Microsoft 365, Entra ID, Windows and Linux.
• Support secure development, code scanning and security testing.

Skills

Threat hunting

Incident response

Vulnerability management

Security monitoring

Zero Trust

Security architecture

Scripting & automation

Education

Matric

Degree/National Diploma

Tools

Azure

Microsoft 365

Entra ID

Active Directory

PowerShell

Python

Bash

REST APIs

EDR

Job description

Cape Town is calling… and no, this isn't another job where cybersecurity means resetting passwords.

We're looking for an experienced Senior Security Analyst to join a high-performing technology environment and take ownership across Security Operations, Cloud Security, Vulnerability Management, Security Engineering, GRC and DevSecOps.

If you know your Microsoft Defender from your Microsoft Teams, can investigate a real security incident, and understand that "Zero Trust" is more than a buzzword, this one's for you.

What you'll be doing

Security Operations

Monitor and investigate security events across cloud, endpoints, networks and applications.

Perform threat hunting, incident response and root-cause analysis.

Enhance SIEM capabilities, playbooks and security monitoring.

Vulnerability Management

Manage vulnerability scanning and risk-based prioritization.

Coordinate remediation with ICT teams and validate fixes.

Produce vulnerability and risk reporting.

Security Engineering & Cloud

Design and implement security controls across Azure, Microsoft 365, Entra ID, Windows, Linux and DevOps.

Implement MFA, PAM, EDR, DLP and security automation.

Secure Azure environments, conduct cloud assessments and support Zero Trust initiatives.

GRC & Security Architecture

Conduct cybersecurity risk assessments and maintain risk registers.

Support audits, policies and compliance requirements including POPIA and CIS Controls.

Review security designs and define secure architecture standards and baselines.

DevSecOps & Awareness

Support secure development, code scanning and security testing.

Help development teams remediate security vulnerabilities.

Drive security awareness, training and organizational cyber resilience.

What you'll need

7+ years ICT experience, including 5+ years in cybersecurity.

Strong enterprise security technology experience.

Proven experience in incident response, threat investigation and vulnerability management.

Strong Azure, Microsoft 365, Entra ID and Active Directory experience.

Experience securing cloud platforms and working in regulated environments.

Strong knowledge of firewalls, IDS/IPS, VPN, segmentation and ZTNA.

Scripting and automation skills using PowerShell, Python, Bash and REST APIs.

Experience with Microsoft Defender, PAM, EDR, DLP, vulnerability management and security monitoring tools.

Qualifications & certifications

Minimum: MatricA relevant Degree/National Diploma.

CISSP, CISM, Security+, AZ-500 or Microsoft Security Certifications.