Location: Cape Town Western Cape South Africa
About our client:
Our international client has redefined the approach to addressing client security needs by reshaping support strategies, tapping into existing client technologies, optimising or complementing their current resources, all while aligning seamlessly with their financial parameters. Through the integration of cutting-edge technologies such as artificial intelligence, machine learning and comprehensive automation, they guarantee an unparalleled level of excellence in the security system.
What you will be doing:
- Continuously monitor client environments and security systems for alerts and incidents. Analyse logs and traffic patterns to provide appropriate responses aligned with contractual Service Descriptions.
- Conduct in-depth investigations on security events, raise incidents, and ensure containment. Act as an escalation point for complex incidents, providing remediation and recommendations to support the full incident management process.
- Lead proactive threat hunting investigations and integrate new security feeds and sources to improve threat detection for clients.
- Develop and implement automation, notification, response, and remediation processes. Your goal is to apply use-cases and develop playbooks to continuously improve team efficiency and operational performance.
- Contribute to the development of security dashboards, reporting, and processes. You will also support the ongoing maintenance of the company’s Information Security Management System (ISMS).
- Manage multiple customer environments concurrently, working with internal and external client stakeholders to provide effective communication and support. You must understand client environments and requirements to ensure customer satisfaction.
- Stay up to date on the changing cybersecurity landscape and regularly educate the team to maintain current knowledge and standards.
What our client is looking for:
- A relevant tertiary qualification would be beneficial (Cyber Security, Information Security, etc.)
- Relevant certifications from recognized bodies such as Microsoft, CompTIA, SANS, CREST, or ISC2.
- 3+ years experience working as a Cyber Security Analyst or equivalent.
- Direct experience working in a SOC environment using essential tools like SIEM, SOAR, and EDR.
- A solid understanding of the Cyber-Kill-Chain and MITRE ATT&CK Framework, along with comprehensive knowledge of common malware types and detection methods.
- Sufficient networking knowledge to analyze traffic patterns and advise on next steps. Understanding of Cloud computing/architecture and security is also required.
- Experience with the Microsoft Sentinel and the broader Microsoft Security stack is highly desirable, as is proficiency with Kusto Query Language (KQL) and Threat Hunting experience.
- Must have a passion for security and a drive to rise to challenges. Possess excellent communication, interpersonal, and good leadership skills.
- Strong time management abilities and the capacity to solve problems while managing different workloads.
- The ability to interact comfortably and build strong relationships with personnel across multiple organizations and business units.
Job ID:
- J107040
For a more comprehensive list of opportunities that we have on offer, do visit our website - https://www.parvana.co.uk/careers
Requirements
Cyber Security Analyst, client security, AI, ML, automation, SOC, SIEM, SOAR, EDR, Cyber-Kill-Chain, MITRE ATT&CK, Microsoft Sentinel, KQL, Threat Hunting, Information Security Management System (ISMS)
Details