Specialist: Cybersecurity Threat Analyst

7 months ago

Midrand, South Africa Nexio Full time

**ROLE PURPOSE**
As part of the Customer-facing Nexio SOC team, the Cybersecurity Threat Analyst will be responsible for monitoring enterprise networks and systems, deterring, identifying, investigating, and mitigating, any and all threats that are directed against those systems regardless of their classification level or type. The Cybersecurity Threat Analyst is expected to collaborate with leadership to develop metrics based on situational awareness and provide support for incident response, surveillance, vulnerability identification, secure network design, and threat monitoring at an enterprise level that will be reported based on the approved plan and supporting checklists. The Cybersecurity Threat Analyst must be able to conduct research on emerging threats, maintains proficiency in exploitation tools, and develops threat profiles to rapidly address security incidents alerted primarily by industry-recognized Security tools and technology.

The incumbent should ideally have advanced security incident handling analysis experience in an established SOC environment and contribute to risk management, lead Red Team/Blue Team exercises, mentor junior analysts, and develop playbooks for incident scenarios. The Cybersecurity Threat Analyst monitors network traffic, investigates incidents, and collaborates with the SOC team to enhance the organization's security posture.

**ROLE REQUIREMENT**
- Is familiar with the tactical and long-term vision across the Cyber Security function.
- Adheres to the standard operating procedure and playbooks in the SOC.
- Direct impact on the SOC performance.
- Impacts on team’s runbooks and operational processes in the SOC Service.
- Provides security incident handling and technical guidance to SOC Teams.
- Gives regular, comprehensive, and constructive feedback, and coaching and mentoring to the team.
- Mentor junior analysts to enhance their effectiveness in their roles.
- Proactively hunt for advanced threats and conduct in-depth research and analysis.
- Monitor network traffic, analyze data, and identify suspicious activity.
- Investigate incidents, determine root causes, and provide incident response support.
- Develop secure network designs, protection strategies, and audits for information security infrastructure.
- Research and maintain proficiency in computer exploitation tools, attack techniques, and emerging threat sources.
- Contribute to a comprehensive risk management program, identifying critical processes, threats, and vulnerabilities.
- Lead Red Team/Blue Team exercises and identify gaps in monitoring tools and processes.
- Develop playbooks for various incident scenarios and possess knowledge of automation processes.
- Analyze incidents from various sources, combined with threat intelligence feeds into the SIEM.
- Assist in coordinating, validating, and managing all-source collection requirements and intelligence activities.
- Conduct nodal analysis, evaluate threat decision-making processes, and identify intelligence gaps.
- Monitor and report changes in threat activities, tactics, capabilities, and objectives.
- Produce timely and fused cyber operations intelligence products, threat assessments, and briefings.
- Provide intelligence analysis and support for exercises, planning activities, and time-sensitive operations.
- Report significant network events, intrusions, and intelligence-derived information.
- Collaborate with stakeholders, analysts, and managers to ensure accurate intelligence requirements and collection plans.

Additional Information:

- Individuals at this level have fully developed knowledge of best practices in security incident handling in an established SOC.
- Able to build strong interpersonal relationships with the SOC team and customer stakeholders.
- Excellent communication skills and communication of complex information to non-technical stakeholders.
- Confident in producing and presenting work.
- In-depth understanding of best security incident analysis and incident handling practices, Strong knowledge of networking protocols, operating systems, and security architecture in an established SOC.
- Proficiency in security tools such as SIEM, IDS/IPS, EDR, and network analyzers.

**TECHNICAL / PROFESSIONAL COMPETENCIES**
- Adhere to operational processes in the NIST CSF and MITRE ATT&CK framework
- Prior experience to advise, plan, deploy, configure, manage, and monitoring large-scale and complex cyber defence and IT risk management and information or cybersecurity solutions.

**QUALIFICATIONS & EXPERIENCE**
- Grade 12
- One or more of these industry Cybersecurity Certifications: GIAC Certified Incident Handler (GCIH), Certified Computer Security Incident Handler (CSIH), CEH, OSCP, CompTIA, Microsoft Security Certifications
- Minimum of four (4) years of work experience, and three (3) years of relevant experience in an established SOC and information security/cybersecurity
- Ability to partake in exercises, develop playbooks, and automat

  • Senior Specialist: Cybersecurity Threat Analyst

    7 months ago

    Midrand, South Africa Nexio Full time

    **ROLE PURPOSE** As part of the Customer-facing Nexio SOC team, the Cybersecurity Threat Analyst will be responsible for monitoring enterprise networks and systems, deterring, identifying, investigating, and mitigating, any and all threats that are directed against those systems regardless of their classification level or type. The Cybersecurity Threat...

  • Specialist: Cybersecurity Analyst

    7 months ago

    Midrand, South Africa Nexio Full time

    **ROLE PURPOSE** As part of the Customer-facing Nexio SOC team, the Specialist: Cybersecurity Analyst plays a critical role in monitoring, detecting, and responding to cybersecurity incidents within a Security Operations Center. The Cybersecurity Analyst utilizes incident handling methodologies to validate security events, assess severity levels, and...

  • Specialist: Cybersecurity Analyst

    7 months ago

    Midrand, South Africa Nexio Full time

    **ROLE PURPOSE** As part of the Customer-facing Nexio SOC team, the Specialist: Cybersecurity Analyst plays a critical role in monitoring, detecting, and responding to cybersecurity incidents within a Security Operations Center. The Cybersecurity Analyst utilizes incident handling methodologies to validate security events, assess severity levels, and provide...

  • Cybersecurity Incident Management Specialist

    7 months ago

    Midrand, South Africa Nexio Full time

    **ROLE PURPOSE** As part of the Customer-facing Nexio SOC team, the Cybersecurity Incident Management Specialist is a crucial role within an organization's cybersecurity team. The primary responsibility of the Cybersecurity Incident Management Specialist is to detect, respond to, investigate, and mitigate cyber threats and incidents that occur within the...

  • Specialist: Cybersecurity Incident Handling Analyst

    7 months ago

    Midrand, South Africa Nexio Full time

    **ROLE PURPOSE** As part of the Customer-facing Nexio SOC team, the Cybersecurity Incident Manager is a crucial role within an organization's cybersecurity team. The primary responsibility of the Cybersecurity Incident Manager is to detect, respond to, investigate, and mitigate cyber threats and incidents that occur within the organization's network and...

  • Cybersecurity Analyst

    7 months ago

    Midrand, South Africa Fidelity Services Group Full time

    **Job Title**: Cybersecurity Analyst **Location**: Ulwazi Campus Midrand/Helderkruin **Reports to**: Information Security Manager** **Job Summary**: We are seeking a skilled and dedicated Cybersecurity Analyst to join our Cybersecurity team in the physical security industry. As a Cybersecurity Analyst, you will play a crucial role in ensuring the security...

  • Cyber Security Lead

    4 weeks ago

    Midrand, Gauteng, South Africa A 1L Realization (Pty) Ltd Full time

    Job OverviewA 1L Realization (Pty) Ltd is seeking a skilled Cyber Security Lead to join our team. In this role, you will be responsible for safeguarding our digital assets and ensuring the confidentiality, integrity, and availability of our information systems.Key ResponsibilitiesSafeguarding Digital Assets: Develop and implement effective security solutions...

  • (15h Left) Senior Specialist – Cyber Security

    2 months ago

    Midrand, South Africa Jobted ZA C2 Full time

    Job DescriptionAs a Senior Specialist in Cyber Security, you will play a key role in safeguarding our organization's digital assets. Your expertise will be vital in ensuring the confidentiality, integrity, and availability of our information systems. This role requires a deep understanding of security operations, solutions, and architectural principles...

  • Senior Specialist – Cyber Security

    2 months ago

    Midrand, South Africa A 1L Realization (Pty) Ltd Full time

    Job DescriptionAs a Senior Specialist in Cyber Security, you will play a key role in safeguarding our organization's digital assets. Your expertise will be vital in ensuring the confidentiality, integrity, and availability of our information systems. This role requires a deep understanding of security operations, solutions, and architectural principles...

  • Senior Specialist – Cyber Security

    2 months ago

    Midrand, South Africa A 1L Realization (Pty) Ltd Full time

    Job Description As a Senior Specialist in Cyber Security, you will play a key role in safeguarding our organization's digital assets. Your expertise will be vital in ensuring the confidentiality, integrity, and availability of our information systems. This role requires a deep understanding of security operations, solutions, and architectural principles...

  • L1 Incident Analyst

    7 months ago

    Midrand, South Africa Liquid Tech (Pty) Ltd. Full time

    **Role Purpose** To deliver day-to-day managed security services (MSS), related to SOC deliverables. Critical in this regard is to execute according to Standard Operating Procedure (SOP) expectations and meeting all related service level agreements (SLAs). It is further expected that these services will be enhanced and matured so that customer value can be...

  • L3 Security Incident Handling Analyst

    2 weeks ago

    Midrand, South Africa Nexio Full time

    **ROLE PURPOSE** As part of the Customer-facing Nexio SOC team, the L3 Security Incident Handling Analyst will be responsible for monitoring enterprise networks and systems, detecting events and reporting on any and all threats that are directed against those systems regardless of their classification level or type. The L3 Security Incident Handling Analyst...

  • Business Partner Cybersecurity

    1 week ago

    Midrand, South Africa Siemens Energy Full time

    Experienced Professional **How You’ll Make an Impact** - The foundation of your success is a university degree or equivalent experience in information technology, cybersecurity or a related field from a reputable college or university - You convince us with professional experience across different functions and businesses with a minimum experience of 5...

  • IT Security Administrator

    1 week ago

    Midrand, South Africa RJPersonnel Full time

    2years - Configure and support Symantec Endpoint Protection antivirus. - Knowledge of firewall rules and should be involved in the review of the firewall policies. - Identify threats and working on steps to defend against them. - General or basic knowledge of vulnerability assessments and penetration tests. - Security awareness/procedures. - Participate in...

  • Security Data Analyst

    5 days ago

    Midrand, South Africa Handpicked Recruitment Full time

    **Description** **Minimum requirements**: - Matric plus Diploma/Degree in Information Security - MS Security Certification - Experience as a data analyst/threat hunting analyst - 1-2 years’ experience working in a SOC - Night shift hours - 18:00 - 06:00 - Must have own transport **Duties will include but are not limited to**: - Providing supporting...

  • L2 Security Incident Manager

    2 weeks ago

    Midrand, South Africa Nexio Full time

    **ROLE PURPOSE** As part of the Customer-facing Nexio SOC team, the L2 Security Incident Manager will identify, analyse and react to security incidents, events and threats using a reliable set of operating processes and SIEM technologies such as Azure Sentinel, or QRadar, or ArcSight. The L2 Security Incident Manager will be responsible for monitoring...

  • Principal Offensive Security Specialist

    7 months ago

    Midrand, South Africa Nexio Full time

    **ROLE REQUIREMENT** - To increase security threat detection capability and defence effectiveness in the Security Assessment Team, and SOC Team in their engagements with customers. - Provides support for Nexio Offensive Security capabilities for the Security Assessment Team, and SOC Team for customers’ engagements. - Direct impact on business resilience...

  • Senior Specialist

    2 days ago

    Midrand, South Africa Communicate Recruitment Full time

    **IT Auditors with exposure to cybersecurity, this is your position!** Senior Specialist: Internal Audit (IT Controls) Gauteng, Midrand The most difficult aspect of this role is being able to balance audit and cybersecurity. If you have exposure to both then do apply. **Duties**: - Execute annual audit plans. - Document great audit reports. - Managing...

  • Service Analyst

    7 months ago

    Midrand, South Africa Nexio Full time

    **ROLE PURPOSE** Nexio is a specialist ICT solution provider that helps clients build, support, and manage their IT infrastructures. We have operations in all 9 provinces across the country, over 200 clients and over 600 employees and as a Level 1 BBBEE we put to practice our commitment to South Africa’s transformation agenda, we are at the forefront of...

  • Quantitative Analyst

    5 hours ago

    Midrand, South Africa Communicate Recruitment Full time

    A Quantitative Analyst is wanted! We are seeking an experienced Quantitative Analyst to join our team! As a Quantitative Analyst you will be responsible for developing, implementing, and maintaining credit risk models. You will be working with a team of professionals who are dedicated to providing our clients with accurate and reliable models to help them...