Cybersecurity Analyst (Junior to Mid)

Position:  

Cybersecurity Analyst (Junior to Mid)

About the role:

We are looking for a Cybersecurity Analyst to help protect our people, systems and data. You will monitor for threats, respond to security events, manage vulnerabilities, and help keep our security controls effective. This role suits someone early in their security career who wants to grow, as well as someone with a few years' experience ready to take on more ownership.

Key responsibilities

• Monitor security alerts and logs from security tools (e.g. SIEM, EDR, email and identity protection), and triage, investigate and escalate as needed.
• Support incident response: containment, investigation, documentation and follow-up actions.
• Run vulnerability scans, track findings, and work with IT teams to get them remediated.
• Help maintain and tune security tools and controls.
• Support identity and access management: access reviews, privileged account controls, joiner/mover/leaver checks.
• Assist with patch compliance and secure configuration of endpoints, servers and cloud services.
• Review and respond to phishing reports and suspicious activity raised by users.
• Contribute to security policies, procedures and runbooks, and keep documentation current.
• Support audits, risk assessments and compliance activities (e.g. ISO 27001, POPIA).
• Help deliver security awareness to staff.
• Stay current on threats, vulnerabilities and industry good practice.

Work experience & Requirements:

• Diploma or degree in IT, Computer Science, Information Security or a related field, or equivalent practical experience.
• 1–4 years in IT or cybersecurity (service desk, systems administration or networking experience counts).
• Working knowledge of Windows and Active Directory, networking fundamentals (TCP/IP, DNS, firewalls), and common attack techniques.
• Familiarity with at least one security tool category: SIEM, EDR/antivirus, vulnerability scanning, or email security.

Advantageous:

• Certifications such as CompTIA Security+, CySA+, Microsoft SC-200/SC-300/AZ-500, ISC2 CC, or equivalent.
• Exposure to cloud platforms (Microsoft 365, Azure, AWS) and their security controls.
• Scripting experience (PowerShell, Python).
• Knowledge of frameworks such as MITRE ATT&CK, NIST CSF, CIS Controls or ISO 27001.

Skills and attributes:

• Analytical, curious and methodical when investigating problems.
• Clear written and verbal communication, including explaining technical issues to non-technical people.
• Good documentation habits.
• Able to prioritise and stay calm under pressure during incidents.
• Trustworthy and discreet with confidential information.
• Keen to learn and grow in the security field.
• Willing to be part of an on-call or standby rotation, if required.

We reserve the right not to make an appointment to any advertised position. Whilst preference is given to existing employees at all times and the choice made is purely on merit, Historically Disadvantaged Candidates and Black Female Candidates are encouraged and supported in the FSG team.

Fidelity Services Group (Pty) Ltd supports the global fair practice and business ethics on the continuous development of our human capital as the key resource to our success in the markets in which we participate.

Should you not be contacted regarding this position within 10 working days from the closing date, please regard your application as unsuccessful.