Cyber Security Analyst

Cyber Security Analyst (blue_team)
(Intermediate/senior)

Please note that we will consider candidates residing in other provinces, i.e Gauteng

The team is growing at a rapid rate and we are looking to add some more awesome, experienced team players!
Candidates that have current cybersecurity will be given first consideration for this Intermediate position as you need to assist with the work as well as ultimately assist with junior staff.

The candidate will be working with the MDR (Managed Detection and Response) team to respond to and investigate malicious activity, triage incidents and assist customers with responding to security incidents.
This position is suitable for the individual that wants to grow and contribute to the BLUE TEAM side of cybersecurity.

What you will be doing:
• Investigate incidents to determine if they are false positives or if they require in depth investigation.
• Investigate cases to closure. Where required escalate or liaise with team members to assist in determining outcome. Communication to clients is key to ensure that cases can be closed with success.
• Work with detection team to devise new methods of detecting malicious activity.
• Review, document and refine response procedure for alerts to ensure it is as effective as possible.
• Develop, analyse and report on alerts and their effectiveness. Work with detection teams to fine tune detectors to make them less likely to create false positives.
• Work with detection and infrastructure teams to optimise response workflow through automation, orchestration or using other innovative methods.

The successful candidate will meet most of these criteria:
• Have a passion for cyber security
• Have troubleshooting skills and experience, both on network and application levels
• Be attentive to details
• Have the ability to communicate clearly and effectively, particularly via email
• Willingness to work in a team environment to improve efficiencies and solve problems as a team
• Have a broad understanding of IT systems in general. Any specialisations will be beneficial.
• In the event of not having any cybersecurity experience, proof that you have been trying to upskill yourself will be beneficial to your application.
• This role requires communication with clients so will require great written (email) communication skills, often some experience in desktop support aids this.

To apply, please send your CV to

While we would really like to respond to every application, should you not be contacted for this position within 15 working days please consider your application unsuccessful this time around.