Security Analyst Level 2

Requirements: Degree/Diploma in Information Technology/Information Systems/Cybersecurity or equivalent ? coupled with 3-5 years’ experience in IT Cyber Security environment/Security analyst or related role? A Certificate in CompTIA CySA+, Microsoft Security Certifications or CEH or equivalent technical security certification will be an added advantage? Recognition of Prior Leaning (RPL) and applicable knowledge and experience on the Job may be considered during the selection process. Essential criteria? Envisaged candidate should possess good oral and written communication skills? Team player? ability to stay abreast of the latest IT and knowledge of Cobit is essential? Excellent interpersonal skills ?Eagerness to learn? Knowledge of other IT applications? Solid Communication skills is a must? oral and written communication skills ?Basic planning and computer literate? problem solving and report writing. Key Performance Areas: Independently investigate security alerts from SIEM, SOC, EDR, DLP, and firewall platforms• Perform in-depth analysis to determine root cause, scope, and impact of security incidents• Execute containment, eradication, and recovery actions in accordance with incident response procedures• Lead incident handling activities up to defined escalation thresholds• Mentor and guide Security Analyst Level 1 staff during investigations • Administer and maintain security platforms including SIEM, DLP, endpoint protection, IDS/IPS, and firewalls• Tune detection rules, correlation logic, and alert thresholds to reduce false positives and improve detection accuracy• Ensure security tools are operational, updated, and aligned with best practice configurations• Assist with secure configuration reviews aligned to CIS Benchmarks and Microsoft Security Baselines• Conduct regular vulnerability scans across systems, networks, and endpoints• Analyse vulnerability findings, prioritise risks, and track remediation activities• Validate remediation of high and critical vulnerabilities within agreed SLA timelines• Participate in security risk assessments and recommend mitigation measures• Ensure security operations align with ISO27001, POPIA, and the NIST Cybersecurity Framework• Maintain accurate incident records, investigation reports, and risk documentation• Prepare operational security reports for management and audits• Support internal and external audits by providing evidence and implementing corrective actions• Support cybersecurity awareness initiatives and phishing simulations• Contribute to the development and improvement of security procedures and playbooks• Stay informed on emerging threats, vulnerabilities, and defensive techniques.