Johannesburg North: Security Analyst posted by Network Finance

About the Role

Network Finance is seeking an experienced Security Analyst to join our team in Johannesburg North. As a key member of our security operations center, you will be responsible for monitoring and responding to security threats, developing and tuning analytics rules, and collaborating with IT teams to remediate vulnerabilities. You will have the opportunity to work with cutting-edge Microsoft security technologies and contribute to the growth of your cybersecurity career in a dynamic environment.

Key Responsibilities

• Monitor, triage, and investigate security alerts using Microsoft Sentinel (SIEM/SOAR)
• Respond to incidents including malware, phishing, identity compromise, and data exfiltration
• Perform root cause analysis and produce detailed incident reports
• Develop and tune analytics rules, dashboards, and automation workflows
• Manage and operate Microsoft Defender (Endpoint, Identity, Cloud Apps, and Office 365)
• Investigate advanced threats using Defender XDR
• Improve detection accuracy and reduce false positives
• Collaborate with IT teams to remediate vulnerabilities
• Secure Azure workloads, identities, and networks
• Support Zero Trust security principles
• Implement and manage RBAC, Conditional Access, and MFA
• Analyse logs and telemetry across Azure environments
• Manage and monitor Fortinet solutions (FortiGate, FortiAnalyzer, FortiManager)
• Investigate network threats and suspicious traffic
• Support firewall rules, segmentation, VPNs, and IDS/IPS tuning
• Integrate network logs into Microsoft Sentinel
• Develop and maintain incident response playbooks
• Align playbooks with compliance standards and MITRE ATT&CK
• Continuously improve processes through testing and simulations
• Maintain clear and auditable documentation
• Support the full vulnerability lifecycle (discovery to remediation)
• Work with Microsoft Defender Vulnerability Management and other tools
• Track remediation progress and report on risk reduction
• Partner with technical teams to close security gaps
• Support Microsoft Purview (DLP, sensitivity labels, compliance reporting)
• Monitor and respond to DLP alerts
• Assist with compliance initiatives (POPIA, ISO 27001, GDPR)

Requirements

• Hands-on experience with Microsoft Sentinel
• Strong experience with Microsoft Defender suite
• Solid knowledge of Microsoft Azure (IAM, networking, security controls)
• Experience with Microsoft Purview
• Understanding of SIEM/SOAR, MITRE ATT&CK, IAM, and cloud security principles

Qualifications

• CompTIA Security+, CISSP, or equivalent certifications (advantageous)
• Microsoft SC-200 (Security Operations Analyst) certification (advantageous)
• Microsoft AZ-500 (Azure Security Engineer) certification (advantageous)
• Microsoft SC-400 (Information Protection Administrator) certification (advantageous)

Salary & Benefits

• Competitive salary and benefits package

Why Join Us?

• Work with cutting-edge Microsoft security technologies
• Be part of a collaborative and forward-thinking security team
• Opportunity to grow your cybersecurity career in a dynamic environment
• Exposure to enterprise-scale cloud and security operations