Specialist: Cybersecurity Threat Analyst

2 weeks ago

Midrand, South Africa Nexio Full time

**ROLE PURPOSE**
As part of the Customer-facing Nexio SOC team, the Cybersecurity Threat Analyst will be responsible for monitoring enterprise networks and systems, deterring, identifying, investigating, and mitigating, any and all threats that are directed against those systems regardless of their classification level or type. The Cybersecurity Threat Analyst is expected to collaborate with leadership to develop metrics based on situational awareness and provide support for incident response, surveillance, vulnerability identification, secure network design, and threat monitoring at an enterprise level that will be reported based on the approved plan and supporting checklists. The Cybersecurity Threat Analyst must be able to conduct research on emerging threats, maintains proficiency in exploitation tools, and develops threat profiles to rapidly address security incidents alerted primarily by industry-recognized Security tools and technology.

The incumbent should ideally have advanced security incident handling analysis experience in an established SOC environment and contribute to risk management, lead Red Team/Blue Team exercises, mentor junior analysts, and develop playbooks for incident scenarios. The Cybersecurity Threat Analyst monitors network traffic, investigates incidents, and collaborates with the SOC team to enhance the organization's security posture.

**ROLE REQUIREMENT**
- Is familiar with the tactical and long-term vision across the Cyber Security function.
- Adheres to the standard operating procedure and playbooks in the SOC.
- Direct impact on the SOC performance.
- Impacts on team’s runbooks and operational processes in the SOC Service.
- Provides security incident handling and technical guidance to SOC Teams.
- Gives regular, comprehensive, and constructive feedback, and coaching and mentoring to the team.
- Mentor junior analysts to enhance their effectiveness in their roles.
- Proactively hunt for advanced threats and conduct in-depth research and analysis.
- Monitor network traffic, analyze data, and identify suspicious activity.
- Investigate incidents, determine root causes, and provide incident response support.
- Develop secure network designs, protection strategies, and audits for information security infrastructure.
- Research and maintain proficiency in computer exploitation tools, attack techniques, and emerging threat sources.
- Contribute to a comprehensive risk management program, identifying critical processes, threats, and vulnerabilities.
- Lead Red Team/Blue Team exercises and identify gaps in monitoring tools and processes.
- Develop playbooks for various incident scenarios and possess knowledge of automation processes.
- Analyze incidents from various sources, combined with threat intelligence feeds into the SIEM.
- Assist in coordinating, validating, and managing all-source collection requirements and intelligence activities.
- Conduct nodal analysis, evaluate threat decision-making processes, and identify intelligence gaps.
- Monitor and report changes in threat activities, tactics, capabilities, and objectives.
- Produce timely and fused cyber operations intelligence products, threat assessments, and briefings.
- Provide intelligence analysis and support for exercises, planning activities, and time-sensitive operations.
- Report significant network events, intrusions, and intelligence-derived information.
- Collaborate with stakeholders, analysts, and managers to ensure accurate intelligence requirements and collection plans.

Additional Information:

- Individuals at this level have fully developed knowledge of best practices in security incident handling in an established SOC.
- Able to build strong interpersonal relationships with the SOC team and customer stakeholders.
- Excellent communication skills and communication of complex information to non-technical stakeholders.
- Confident in producing and presenting work.
- In-depth understanding of best security incident analysis and incident handling practices, Strong knowledge of networking protocols, operating systems, and security architecture in an established SOC.
- Proficiency in security tools such as SIEM, IDS/IPS, EDR, and network analyzers.

**TECHNICAL / PROFESSIONAL COMPETENCIES**
- Adhere to operational processes in the NIST CSF and MITRE ATT&CK framework
- Prior experience to advise, plan, deploy, configure, manage, and monitoring large-scale and complex cyber defence and IT risk management and information or cybersecurity solutions.

**QUALIFICATIONS & EXPERIENCE**
- Grade 12
- One or more of these industry Cybersecurity Certifications: GIAC Certified Incident Handler (GCIH), Certified Computer Security Incident Handler (CSIH), CEH, OSCP, CompTIA, Microsoft Security Certifications
- Minimum of four (4) years of work experience, and three (3) years of relevant experience in an established SOC and information security/cybersecurity
- Ability to partake in exercises, develop playbooks, and automat

  • Senior Specialist: Cybersecurity Threat Analyst

    2 weeks ago

    Midrand, South Africa Nexio Full time

    **ROLE PURPOSE** As part of the Customer-facing Nexio SOC team, the Cybersecurity Threat Analyst will be responsible for monitoring enterprise networks and systems, deterring, identifying, investigating, and mitigating, any and all threats that are directed against those systems regardless of their classification level or type. The Cybersecurity Threat...

  • Specialist: Cybersecurity Analyst

    2 weeks ago

    Midrand, South Africa Nexio Full time

    **ROLE PURPOSE** As part of the Customer-facing Nexio SOC team, the Specialist: Cybersecurity Analyst plays a critical role in monitoring, detecting, and responding to cybersecurity incidents within a Security Operations Center. The Cybersecurity Analyst utilizes incident handling methodologies to validate security events, assess severity levels, and...

  • Specialist: Cybersecurity Analyst

    4 weeks ago

    Midrand, South Africa Nexio Full time

    **ROLE PURPOSE** As part of the Customer-facing Nexio SOC team, the Specialist: Cybersecurity Analyst plays a critical role in monitoring, detecting, and responding to cybersecurity incidents within a Security Operations Center. The Cybersecurity Analyst utilizes incident handling methodologies to validate security events, assess severity levels, and provide...

  • Senior Specialist: Cybersecurity Analyst

    4 weeks ago

    Midrand, South Africa Nexio Full time

    **ROLE PURPOSE** As part of the Customer-facing Nexio SOC team, the Senior Specialist: Cybersecurity Analyst plays a critical role in monitoring, detecting, and responding to cybersecurity incidents within a Security Operations Center. The Cybersecurity Analyst utilizes incident handling methodologies to validate security events, assess severity levels, and...

  • Cybersecurity Incident Management Specialist

    2 days ago

    Midrand, South Africa Nexio Full time

    **ROLE PURPOSE** As part of the Customer-facing Nexio SOC team, the Cybersecurity Incident Management Specialist is a crucial role within an organization's cybersecurity team. The primary responsibility of the Cybersecurity Incident Management Specialist is to detect, respond to, investigate, and mitigate cyber threats and incidents that occur within the...

  • Specialist: Cybersecurity Incident Handling Analyst

    3 weeks ago

    Midrand, South Africa Nexio Full time

    **ROLE PURPOSE** As part of the Customer-facing Nexio SOC team, the Cybersecurity Incident Manager is a crucial role within an organization's cybersecurity team. The primary responsibility of the Cybersecurity Incident Manager is to detect, respond to, investigate, and mitigate cyber threats and incidents that occur within the organization's network and...

  • Security Threat Analyst

    56 minutes ago

    Midrand, Gauteng, South Africa Merafong ICT Full time

    Job SummaryMerafong ICT is seeking a seasoned Security Threat Analyst to join our team. The ideal candidate will have extensive experience in cybersecurity, particularly within a SOC environment.Key ResponsibilitiesIdentify and analyze sophisticated threats and vulnerabilities using advanced tools and techniques.Lead and coordinate response efforts for major...

  • Cybersecurity Specialist

    49 minutes ago

    Midrand, Gauteng, South Africa Merafong ICT Full time

    Job OverviewMerafong ICT seeks a seasoned Cybersecurity Specialist to join our team. The ideal candidate will have extensive experience in cybersecurity, particularly within a SOC environment.Key ResponsibilitiesLead and coordinate response efforts for major security incidents.Conduct deep-dive forensic analysis to understand the root cause and impact of...

  • Cybersecurity Analyst

    4 weeks ago

    Midrand, South Africa Fidelity Services Group Full time

    **Job Title**: Cybersecurity Analyst **Location**: Ulwazi Campus Midrand/Helderkruin **Reports to**: Information Security Manager** **Job Summary**: We are seeking a skilled and dedicated Cybersecurity Analyst to join our Cybersecurity team in the physical security industry. As a Cybersecurity Analyst, you will play a crucial role in ensuring the security...

  • Specialist: Cybersecurity Incident Manager

    4 weeks ago

    Midrand, South Africa Nexio Full time

    **ROLE PURPOSE** As part of the Customer-facing Nexio SOC team, the Cybersecurity Incident Manager is a crucial role within an organization's cybersecurity team. The primary responsibility of the Cybersecurity Incident Manager is to detect, respond to, investigate, and mitigate cyber threats and incidents that occur within the organization's network and...

  • Senior Specialist: Cybersecurity Incident Management

    5 days ago

    Midrand, South Africa Nexio Full time

    **ROLE PURPOSE** Nexio is a specialist ICT solution provider that helps clients build, support, and manage their IT infrastructures. We have operations in all 9 provinces across the country, over 200 clients and over 600 employees and as a Level 1 BBBEE we put to practice our commitment to South Africa’s transformation agenda, we are at the forefront of...

  • Cybersecurity Specialist

    4 days ago

    Midrand, Gauteng, South Africa Careers at DLK Group Full time

    Careers at DLK GroupMidrand, South Africa | Posted on The Cybersecurity Specialist is responsible for safeguarding the organization's digital assets, networks, systems, and data. The role ensures robust security measures are in place to protect against threats, vulnerabilities, and unauthorized access while ensuring compliance with governance and regulatory...

  • Cybersecurity Operations Specialist

    53 minutes ago

    Midrand, Gauteng, South Africa Merafong ICT Full time

    Job OverviewMerafong ICT is seeking a highly skilled Cybersecurity Operations Specialist to join our team. In this role, you will be responsible for analyzing security threats and developing strategies to mitigate them.Key ResponsibilitiesIncident Response: Assessing and responding to security incidents in a timely and effective manner.Threat Hunting:...

  • Threat Intelligence Analyst Level 2

    47 minutes ago

    Midrand, Gauteng, South Africa Merafong ICT Full time

    Job SummaryMerafong ICT is seeking a highly skilled Threat Intelligence Analyst Level 2 to join our team. In this role, you will be responsible for analyzing security threats and developing strategies to mitigate them.Key ResponsibilitiesThreat Intelligence Analysis: Analyzing threat intelligence feeds to identify potential security threats.Security...

  • Cybersecurity and Risk Manager

    5 days ago

    Midrand, Gauteng, South Africa Careers at DLK Group Full time

    Job DescriptionCareers at DLK Group are committed to protecting our digital assets, networks, systems, and data. As a Cybersecurity Specialist, you will be responsible for safeguarding our organization's security posture by ensuring robust measures are in place to protect against threats, vulnerabilities, and unauthorized access while adhering to governance...

  • L1 Incident Analyst

    3 weeks ago

    Midrand, South Africa Liquid Tech (Pty) Ltd. Full time

    **Role Purpose** To deliver day-to-day managed security services (MSS), related to SOC deliverables. Critical in this regard is to execute according to Standard Operating Procedure (SOP) expectations and meeting all related service level agreements (SLAs). It is further expected that these services will be enhanced and matured so that customer value can be...

  • Cybersecurity Business Development Specialist

    5 days ago

    Midrand, Gauteng, South Africa Epsidon Management and Marketing Consultancy Full time

    Role OverviewCybersecurity Sales Specialist at Epsidon Management and Marketing Consultancy drives annual and quarterly targets by effectively managing business activities to support sales and generate incremental revenue.The role requires strong account management skills, effective communication, and the ability to drive sales and meet or exceed revenue...

  • L3 Security Incident Handling Analyst

    3 weeks ago

    Midrand, South Africa Nexio Full time

    **ROLE PURPOSE** As part of the Customer-facing Nexio SOC team, the L3 Security Incident Handling Analyst will be responsible for monitoring enterprise networks and systems, detecting events and reporting on any and all threats that are directed against those systems regardless of their classification level or type. The L3 Security Incident Handling Analyst...

  • L3 Security Incident Handling Analyst

    3 weeks ago

    Midrand, South Africa Nexio Full time

    **ROLE PURPOSE** As part of the Customer-facing Nexio SOC team, the L3 Security Incident Handling Analyst will identify, analyse and react to security incidents, events and threats using a reliable set of operating processes and SIEM technologies such as Azure Sentinel, or QRadar, or ArcSight. The SIEM Platform Lead will support the architecture, deployment,...

  • Business Partner Cybersecurity

    3 weeks ago

    Midrand, South Africa Siemens Energy Full time

    Experienced Professional **How You’ll Make an Impact** - The foundation of your success is a university degree or equivalent experience in information technology, cybersecurity or a related field from a reputable college or university - You convince us with professional experience across different functions and businesses with a minimum experience of 5...