Specialist: Cybersecurity Analyst

5 months ago

Midrand, South Africa Nexio Full time

**ROLE PURPOSE**

As part of the Customer-facing Nexio SOC team, the Specialist: Cybersecurity Analyst plays a critical role in monitoring, detecting, and responding to cybersecurity incidents within a Security Operations Center. The Cybersecurity Analyst utilizes incident handling methodologies to validate security events, assess severity levels, and provide guidance to SOC Analysts. By leveraging threat intelligence and conducting in-depth analysis, Cybersecurity Analyst identifies the scope of attacks, impacted systems, and potential perpetrators. The Cybersecurity Analyst ensures shift-related metrics are monitored, offers recommendations, and advises on containment and recovery steps. The Cybersecurity Analyst documents incidents, updates relevant documentation and supports the development of analytic methods for threat detection.

He/She should ideally have advanced security incident handling analysis experience in an established SOC environment and contribute to risk management, lead Blue Team exercises, mentor junior analysts, and develop playbooks for incident scenarios. The Cybersecurity Analyst monitors network traffic, investigates incidents, and collaborates with the SOC team to respond to threats or intrusions.

**ROLE REQUIREMENT**
- Is familiar with the tactical and long-term vision across the Cyber Security function.
- Adheres to the standard operating procedure and playbooks in the SOC.
- Impacts on Customer satisfaction and confidence in the SOC Service and service level performance.
- Provides security incident handling and technical guidance to SOC Teams.
- Gives regular, comprehensive, and constructive feedback, and coaching and mentoring to the team.
- Mentor junior analysts to enhance their effectiveness in their roles.
- Delegates work to team members taking into account their capacity, level of skill, and exposure to different types of work and complexity; provides clear instructions and direction, with reasonable deadlines.
- Validate and declare security incidents based on incident handling methodologies.
- Confirm severity levels (S0 to S4) using SLA severity classification.
- Provide guidance and support to SOC Analysts during incident response.
- Utilize threat intelligence, updated rules, and IOCs to identify affected systems and the extent of attacks.
- Conduct in-depth threat intelligence analysis to uncover attack types, data/systems impacted, and potential perpetrators.
- Monitor shift-related metrics and gather applicable reporting for the SOC Team Lead and SOC Manager.
- Make recommendations to SOC Team Lead and SOC Manager regarding additional analysis and required remediation.
- Determine the impact on critical systems or data sets and advise on remediation steps.
- Validate false positives, policy violations, intrusion attempts, security threats, and potential compromises.
- Suggest containment and recovery steps based on analysis findings.
- Document workload and output from each shift for service performance measurement.
- Formally document learnings and update relevant documentation such as shift logs and tickets.
- Provide support for analytic methods to detect threats and conduct further triage based on defined run books.
- Consolidate data through alert triage, providing necessary context before escalating to Operations and Security Engineering Teams for deeper analysis.
- Manage security events, incidents, and service requests via the ticketing systems.
- Identify alarms by intent and method, including reconnaissance, system compromises, and ingested log sources:

- Firewalls and network devices
- Infrastructure server and end-user systems
- Threat intelligence platforms
- Cloud and hybrid-IT provisioning, access, and infrastructure systems (Amazon Web Services)
- Antivirus systems
- Intrusion detection and prevention systems
- Similar in Scope source systems
- Validate and update initial tickets in the SIEM platform and Service Desk.
- Monitor event queues, investigate potential incidents, and escalate or close events as necessary.
- Validate investigation results and pass relevant details to the SOC Team Lead.
- Assess security controls based on cybersecurity principles and frameworks (e.g., CIS CSC, NIST SP 800-53).
- Analyze network traffic, characterize threats, and coordinate with cyber defense staff for validation.
- Document and escalate incidents, perform trend analysis, and report findings.
- Review security architecture, identify gaps, and recommend risk mitigation strategies.
- Plan and recommend modifications based on exercise results or system environment.
- Perform daily summary reports of network events and activity relevant to cyber defense practices.
- Provide timely detection, identification, and alerting of possible attacks, intrusions, and anomalous activities.
- Utilize cyber defense tools for monitoring and analyzing system activity, identifying and analyzing malicious behavior.
- Conduct analysis of network traffic, including network ma

  • Cybersecurity Analyst Specialist

    4 weeks ago

    Midrand, Gauteng, South Africa Nexio Full time

    Cybersecurity Analyst SpecialistJoin Nexio's Cybersecurity Team as a Cybersecurity Analyst Specialist and play a critical role in monitoring, detecting, and responding to cybersecurity incidents within our Security Operations Center (SOC). As a Cybersecurity Analyst Specialist, you will utilize incident handling methodologies to validate security events,...

  • Specialist: Cybersecurity Analyst

    5 months ago

    Midrand, South Africa Nexio Full time

    **ROLE PURPOSE** As part of the Customer-facing Nexio SOC team, the Specialist: Cybersecurity Analyst plays a critical role in monitoring, detecting, and responding to cybersecurity incidents within a Security Operations Center. The Cybersecurity Analyst utilizes incident handling methodologies to validate security events, assess severity levels, and provide...

  • Senior Specialist: Cybersecurity Analyst

    5 months ago

    Midrand, South Africa Nexio Full time

    **ROLE PURPOSE** As part of the Customer-facing Nexio SOC team, the Senior Specialist: Cybersecurity Analyst plays a critical role in monitoring, detecting, and responding to cybersecurity incidents within a Security Operations Center. The Cybersecurity Analyst utilizes incident handling methodologies to validate security events, assess severity levels, and...

  • Cybersecurity Incident Management Specialist

    5 months ago

    Midrand, South Africa Nexio Full time

    **ROLE PURPOSE** As part of the Customer-facing Nexio SOC team, the Cybersecurity Incident Management Specialist is a crucial role within an organization's cybersecurity team. The primary responsibility of the Cybersecurity Incident Management Specialist is to detect, respond to, investigate, and mitigate cyber threats and incidents that occur within the...

  • Senior Cybersecurity Threat Analyst

    4 weeks ago

    Midrand, Gauteng, South Africa Nexio Full time

    Job Title: Senior Specialist: Cybersecurity Threat AnalystAt Nexio, we are seeking a highly skilled Senior Specialist: Cybersecurity Threat Analyst to join our Customer-facing Nexio SOC team. As a key member of our team, you will be responsible for monitoring enterprise networks and systems, deterring, identifying, investigating, and mitigating any and all...

  • Specialist: Cybersecurity Threat Analyst

    5 months ago

    Midrand, South Africa Nexio Full time

    **ROLE PURPOSE** As part of the Customer-facing Nexio SOC team, the Cybersecurity Threat Analyst will be responsible for monitoring enterprise networks and systems, deterring, identifying, investigating, and mitigating, any and all threats that are directed against those systems regardless of their classification level or type. The Cybersecurity Threat...

  • Specialist: Cybersecurity Incident Handling Analyst

    5 months ago

    Midrand, South Africa Nexio Full time

    **ROLE PURPOSE** As part of the Customer-facing Nexio SOC team, the Cybersecurity Incident Manager is a crucial role within an organization's cybersecurity team. The primary responsibility of the Cybersecurity Incident Manager is to detect, respond to, investigate, and mitigate cyber threats and incidents that occur within the organization's network and...

  • Cybersecurity Analyst

    5 months ago

    Midrand, South Africa Fidelity Services Group Full time

    **Job Title**: Cybersecurity Analyst **Location**: Ulwazi Campus Midrand/Helderkruin **Reports to**: Information Security Manager** **Job Summary**: We are seeking a skilled and dedicated Cybersecurity Analyst to join our Cybersecurity team in the physical security industry. As a Cybersecurity Analyst, you will play a crucial role in ensuring the security...

  • Senior Specialist: Cybersecurity Threat Analyst

    5 months ago

    Midrand, South Africa Nexio Full time

    **ROLE PURPOSE** As part of the Customer-facing Nexio SOC team, the Cybersecurity Threat Analyst will be responsible for monitoring enterprise networks and systems, deterring, identifying, investigating, and mitigating, any and all threats that are directed against those systems regardless of their classification level or type. The Cybersecurity Threat...

  • Cybersecurity Analyst

    7 days ago

    Midrand, Gauteng, South Africa Datacentrix Full time

    Datacentrix is seeking a skilled Cybersecurity Analyst to join their team. The ideal candidate will have expertise in installing, configuring, and maintaining Qradar SIEM and related products. Key responsibilities include providing initial investigation of all security incidents, managing incidents from inception to resolution, and liaising with vendors and...

  • Specialist: Cybersecurity Incident Manager

    5 months ago

    Midrand, South Africa Nexio Full time

    **ROLE PURPOSE** As part of the Customer-facing Nexio SOC team, the Cybersecurity Incident Manager is a crucial role within an organization's cybersecurity team. The primary responsibility of the Cybersecurity Incident Manager is to detect, respond to, investigate, and mitigate cyber threats and incidents that occur within the organization's network and...

  • Senior Specialist: Cybersecurity Infrastructure

    5 months ago

    Midrand, South Africa Nexio Full time

    **ROLE PURPOSE** As part of the Customer-facing Nexio SOC team, the Senior Specialist: Cybersecurity Infrastructure Support will identify, analyze and react to security incidents, events, and threats using a reliable set of operating processes and SIEM technologies such as Azure Sentinel, or QRadar, or ArcSight. The Senior Specialist: Cybersecurity...

  • Cybersecurity Specialist

    2 weeks ago

    Midrand, Gauteng, South Africa DPT Recruitment Full time

    DPT Recruitment is seeking a highly skilled Cybersecurity Specialist to join our team. As our ICT Security Administrator, you will play a crucial role in safeguarding our organization's digital assets.Key Responsibilities:Security System Management:Configure, monitor, and fine-tune security tools (firewalls, antivirus software, intrusion detection/prevention...

  • Cybersecurity Professional

    2 weeks ago

    Midrand, Gauteng, South Africa Carlysle Human Capital Full time

    About the RoleCarlysle Human Capital is seeking a highly skilled Cybersecurity Professional to join our team. As an Information Security Analyst, you will play a crucial role in protecting our clients' infrastructure and data from emerging threats.Key ResponsibilitiesMonitor and manage network, endpoint, and security operations within the SANRAL Data...

  • L1 Incident Analyst

    5 months ago

    Midrand, South Africa Liquid Tech (Pty) Ltd. Full time

    **Role Purpose** To deliver day-to-day managed security services (MSS), related to SOC deliverables. Critical in this regard is to execute according to Standard Operating Procedure (SOP) expectations and meeting all related service level agreements (SLAs). It is further expected that these services will be enhanced and matured so that customer value can be...

  • Service Analyst

    5 months ago

    Midrand, South Africa Nexio Full time

    **ROLE PURPOSE** Nexio is a specialist ICT solution provider that helps clients build, support, and manage their IT infrastructures. We have operations in all 9 provinces across the country, over 200 clients and over 600 employees and as a Level 1 BBBEE we put to practice our commitment to South Africa’s transformation agenda, we are at the forefront of...

  • Problem Specialist

    5 months ago

    Midrand, South Africa Nexio Full time

    Nexio is a specialist ICT solution provider that helps clients build, support, and manage their IT infrastructures. We have operations in all 9 provinces across the country, over 200 clients and over 600 employees and as a Level 1 BBBEE we put to practice our commitment to South Africa’s transformation agenda, we are at the forefront of digital...

  • Senior Financial Analyst

    5 days ago

    Midrand, Gauteng, South Africa PRR Recruitment Full time

    Job Summary: We are seeking a highly skilled Senior Financial Analyst - Key Accounts Specialist to join our team at PRR Recruitment.Key Responsibilities: Client Relations - Develop and maintain strong relationships with key clients.Statistical / Trend Analysis - Analyze and interpret complex financial data to identify trends and patterns.Online Intelligence...

  • Cybersecurity Specialist

    5 days ago

    Midrand, Gauteng, South Africa Datacentrix Full time

    Job Title: Network Security EngineerDatacentrix is seeking an experienced Network Security Engineer to provide day-to-day support for firewall engineering and operation tasks. Key responsibilities include maintaining and optimizing firewall configurations, ensuring network security compliance, and collaborating with internal teams to implement security...

  • Cyber Security Defense Specialist

    5 days ago

    Midrand, Gauteng, South Africa Planet10 Full time

    Job OverviewAt Planet10, we're seeking a highly skilled Cyber Security Defense Specialist to join our team. As a key member of our Cyber Defence team, you'll be responsible for delivering a highly effective end-to-end 24x7 Cyber Defence service. Your expertise will drive Cyber security improvement, collaborating closely with operational teams and external...