Senior Security Analyst: Incident Response & Cloud Security

Adapt IT Group; Midrand; On-site; ZAR 600,000 - 900,000; Full time

Job summary

Adapt IT Group in South Africa seeks an experienced Security Analyst to own day-to-day monitoring, investigation and resolution of cybersecurity threats and incidents across our environment. In this role you will work across security monitoring, incident response, vulnerability management, cloud security, identity and access security, application security, and compliance.

You will also contribute to improving our overall security posture while providing technical guidance and support to junior

Qualifications

• Minimum 5 years in cybersecurity operations, SOC Analyst or similar IT security role.
• Baseline CompTIA Security+.
• CompTIA CySA+ or GIAC GCIH required or in progress at appointment.
• Hands-on experience resolving security incidents from detection to remediation.
• Experience with SIEM detection, alert investigation and security monitoring.
• Experience securing and monitoring AWS and/or Azure environments.
• Knowledge of phishing analysis and email security controls.

Responsibilities

• Monitor, investigate, triage and resolve security alerts and incidents using SIEM, IDS/IPS, EDR and vulnerability management platforms.
• Investigate security incidents, determine root cause, scope and business impact, and lead containment, eradication and recovery activities.
• Perform vulnerability assessments and drive remediation.
• Develop and tune SIEM detection rules and use cases.
• Advise on vulnerability management and risk prioritisation.
• Coordinate penetration testing and track findings through to resolution.
• Conduct threat intelligence gathering and proactive threat hunting.

Skills

Cybersecurity

Threat hunting

Incident response

SIEM

IAM

Education

Bachelor's degree in Information Security, CS or IT

Tools

SIEM

EDR

AWS

Azure

PowerShell

Python

Job description

Adapt IT Group in South Africa seeks an experienced Security Analyst to own day-to-day monitoring, investigation and resolution of cybersecurity threats and incidents across our environment. In this role you will work across security monitoring, incident response, vulnerability management, cloud security, identity and access security, application security, and compliance.

You will also contribute to improving our overall security posture while providing technical guidance and support to junior