Security Monitoring Analyst IT - Johannesburg

• 3+ years of professional IT experience
• 1+ years of experience in information security, in areas such as security operations, intrusion detection,

incident analysis, incident handling and log analysis

• Experience with reviewing raw log files, data correlation, and analysis (i.e., firewall, network flow, intrusion

detection systems, system logs)

• A sound knowledge of IT security best practices, common attack types and detection/prevention methods

including malware, emerging threats, attacks, and vulnerability management

• TCP/IP knowledge, networking, and security product experience
• Demonstrable experience of analysing and interpreting system, security, and application logs
• Knowledge of the type of events that both Firewalls, IDS/IPS and other security related devices produce
• Experience with AlienVault, ArcSight, LogRhythm, QRadar, Splunk and other SIEM tools is preferable but not

mandatory

• Experience assisting in the development of procedures and documentation
• Customer service including the resolution of customer escalations, incident handling, and reporting
• Highly proficient in spoken and written English

Duties:

• Monitor the Client SIEM tool to detect IT security incidents
• Monitor multiple security technologies, such as IDS/IPS, Firewalls, Switches, VPNs, and other security threat

data sources

• Respond to inbound requests via email and other electronic means for technical assistance with security

managed services

• Perform manual alert correlations in accordance with predefined procedures and escalate based on specific

Project/Client requirements

• Handling of Incidents through ticketing systems and follow through completion and/or escalation in

accordance with established procedures.

• Work in correlation with SLAs as applicable for day-to-day Operations of the Monitoring Team
• Document procedures used to solve issues for future reference.

Find Us on Social Media