Johannesburg: Security Analyst

About the Role

We are seeking an experienced Security Analyst to join our team in Johannesburg, responsible for monitoring security events, responding to incidents, and improving our organisation’s security posture across both cloud and on-prem environments.

Key Responsibilities

• Monitor, triage, and investigate security alerts using Microsoft Sentinel (SIEM/SOAR)
• Respond to incidents, including malware, phishing, identity compromise, and data exfiltration
• Perform root cause analysis and produce detailed incident reports
• Develop and tune analytics rules, dashboards, and automation workflows
• Manage and operate Microsoft Defender (Endpoint, Identity, Cloud Apps, and Office 365)
• Investigate advanced threats using Defender XDR
• Improve detection accuracy and reduce false positives
• Collaborate with IT teams to remediate vulnerabilities
• Secure Azure workloads, identities, and networks
• Support Zero Trust security principles
• Implement and manage RBAC, conditional access, and MFA
• Analyse logs and telemetry across Azure environments
• Manage and monitor Fortinet solutions (FortiGate, FortiAnalyzer, and FortiManager)
• Investigate network threats and suspicious traffic
• Support firewall rules, segmentation, VPNs, and IDS/IPS tuning
• Integrate network logs into Microsoft Sentinel
• Develop and maintain incident response playbooks
• Align playbooks with compliance standards and MITRE ATT&CK
• Continuously improve processes through testing and simulations
• Maintain clear and auditable documentation

Requirements

• Hands-on experience with Microsoft Sentinel
• Strong experience with Microsoft Defender suite
• Solid knowledge of Microsoft Azure (IAM, networking, and security controls)
• Experience with Microsoft Purview
• Understanding of SIEM/SOAR, MITRE ATT&CK, IAM, and cloud security principles

Qualifications

• Formal education/certifications: CompTIA Security, CISSP, or equivalent; Microsoft SC-200 (Security Operations Analyst); Microsoft AZ-500 (Azure Security Engineer); Microsoft SC-400 (Information Protection Administrator)

Salary & Benefits

(No salary information is provided in the original job description. Therefore, this section will be skipped.)

Note: As per the instructions, I have followed the exact structure and formatting requirements. However, please note that the salary information was not provided in the original job description, so I had to skip that section.