Browse live cyber security jobs in Stellenbosch, Western Cape. Salaries, top employers and how to apply. Updated regularly.

**We are looking for an experienced Security Defence \& Operations Lead to take ownership of the operational defence of a complex digital environment.** 




  





 Join a global organisation with a diverse and complex technology environment, where cybersecurity is critical to protecting the business and enabling its continued growth.
 



 This is a key role within Group Information Security, responsible for ensuring that cyber threats are identified, contained and remediated quickly, while strengthening the organisation’s security controls and reducing overall cyber risk.
 



  





 You’ll work closely with the SOC, IT Infrastructure \& Operations, Service Desk, DevSecOps, Risk \& Compliance teams and external security providers to ensure the organisation remains protected against an evolving threat landscape.
 



  





 You are a decisive, analytical and hands\-on security professional who stays calm under pressure and takes ownership when incidents occur.
 



  





 You can translate technical security requirements into practical action, collaborate effectively with both technical and non\-technical stakeholders, and continuously look for ways to improve security operations and response capabilities.
 



  





**Why this opportunity?** 




 This is an opportunity to play a critical role in protecting a large enterprise environment, leading security defence and operations while helping shape stronger incident response, vulnerability management and security controls.
 



  





 If you have the technical depth, operational leadership and cyber resilience mindset to take ownership of an organisation’s security defence \- we want to hear from you.
 



  





 Apply now or contact us for a confidential discussion about the opportunity.
 



  





**Duties:** 



* Lead the remediation and recovery of security incidents identified by the virtual Security Operations Centre (SOC).
* Coordinate vulnerability management and remediation across IT and infrastructure teams.
* Drive patch management and ensure vulnerabilities are tracked, prioritised and resolved.
* Maintain and optimise Endpoint Detection \& Response (EDR) and network segmentation controls.
* Review security incidents, patching activity and remediation effectiveness.
* Optimise SOC alert handoffs, workflows and reporting to improve response times and reduce false positives.
* Develop and maintain practical incident response playbooks and operational procedures.
* Manage and monitor third\-party SOC, vulnerability management and security service providers against agreed SLAs.
* Support continuous improvement of the organisation’s security controls, processes and operational resilience.
* Ensure security operations align with relevant security baselines, frameworks and compliance requirements.



  





**Job Experience \& Skills Required:** 




  





**Qualifications:** 




  




* Matric (Grade 12\)
* Bachelor’s degree in Information Security, Computer Science, Information Technology or a related field.
* CISSP, GCIH, CEH, CompTIA Security\+/CySA\+ or relevant Microsoft security certifications are highly relevant.
* Microsoft SC\-200, SC\-300 and SC\-900, together with experience using Microsoft Defender for Endpoint, Microsoft Sentinel and Microsoft 365 security tools.



  





**Experience:** 




  




* 6 \- 10 years of progressive experience in cybersecurity operations, including hands\-on incident response and threat remediation.



  





**Skills \& Competencies:** 




  




* Incident Response \& Threat Remediation
* SOC Operations \& Threat Detection
* Vulnerability Management \& Remediation
* Patch Management
* Endpoint Detection \& Response (EDR)
* Security Controls \& Network Segmentation
* Cybersecurity Frameworks – NIST \& MITRE ATT\&CK
* Stakeholder \& Third\-Party Security Provider Management



  





 If you have not had any response in two weeks, please consider the vacancy application unsuccessful. Your profile will be kept on our database for any other suitable roles / positions.

Security Defence & Operations Lead

You are as unique as your background, experience and point of view. Here, you’ll be encouraged, empowered and challenged to be your best self. You'll work with dynamic colleagues \- experts in their fields \- who are eager to share their knowledge with you. Your leaders will inspire and help you reach your potential and soar to new heights. Every day, you'll have new and exciting opportunities to make life brighter for our Clients \- who are at the heart of everything we do.
   

  

 At Sun Life, we're driven by our Purpose: helping our Clients achieve lifetime financial security and live healthier lives. Our values shape how we work: caring, authentic, bold, inspiring, and impactful.
   

  

 When you join Sun Life, you'll work with passionate colleagues and empowering leaders who support your growth and celebrate your contributions, so you can make a meaningful difference in our Clients' lives.
   

  

 Discover how you can make a difference in the lives of individuals, families and communities around the world.
   

  

**Job Description:**
 At Sun Life, we work together, share common values, and encourage growth and achievement. We are seeking a skilled
 **Penetration Testing Analyst** 
 to perform hands\-on security testing of applications, infrastructure, and systems.
   

  

 This role is primarily focused on
 **Penetration Testing delivery** 
 , with
 **secondary exposure to Red Team activities** 
 , contributing to adversary simulation exercises where required. The successful candidate will have strong technical testing capabilities, with an interest in developing broader offensive security skills.
   

  

**Key Responsibilities**
* Perform web, API, mobile, and infrastructure penetration testing across enterprise applications.
* Identify, exploit, and validate security vulnerabilities using manual testing techniques and industry tools.
* Conduct testing in line with established methodologies and security frameworks (e.g., OWASP).
* Produce clear, structured reports outlining:
+ Vulnerabilities and root cause
+ Business impact and risk rating
+ Practical remediation recommendations

* Perform research into new vulnerabilities, exploits, and attack techniques to enhance testing coverage.
* Support re\-testing activities to validate remediation of identified issues.
* Support Red Team activities where required.
* Contribute to reconnaissance and attack surface mapping, Identification of potential attack paths.
* Support documentation of attack paths and identified security gaps.
* Assist in controlled exploitation activities under guidance, including:
+ Initial access techniques
+ Limited post\-exploitation validation (e.g., privilege escalation concepts, lateral movement awareness)
+ Collaborate with senior team members to understand real\-world attacker behaviour and techniques.

**Required Skills \& Experience**
**Core Penetration Testing Skills (Essential)** 

* 2\+ years of hands\-on experience in:
+ Web application security testing (OWASP Top 10\)
+ API security testing
+ Basic network/infrastructure testing

* Strong understanding of:
+ Authentication, session management, and access control flaws
+ Input validation and injection vulnerabilities

* Experience with tools such as:
+ Burp Suite, Nmap, sqlmap, or similar

* Ability to perform manual testing beyond automated scanning.
* Strong documentation and reporting skills, with focus on clear risk articulation.


**Red Teaming Skills (Desirable – Foundational Level)**
* Basic understanding of adversary simulation concepts and attack lifecycle.
* Familiarity with:
+ Reconnaissance techniques
+ Common initial compromise methods

* Awareness of:
+ Privilege escalation and lateral movement concepts
+ Attack paths across enterprise environments

* Interest in developing Red Team and offensive security capabilities over time.


**Qualifications**
* Bachelor's degree in Computer Science, Information Security, or a related field.
* Certifications such as OSCP, OSWA, CISSP or CompTIA are desired but not required.


**Job Category:**
 IT \- Technology Services
   

  

**Posting End Date:**
 30/12/2026

Penetration Testing Analyst

Declaration
The South African Weather Service (SAWS) is a Section 3(a) public entity under the Ministry of Water and Environmental Affairs and is governed by a Board of Directors. The company became a public entity on 15 July 2001 in terms of the South African Weather Service Act (No. 8 of 2001\). It is an authoritative voice for weather and climate forecasting in South Africa and as a member of the World Meteorological Organization (WMO) it complies with international meteorological standards.

  

  

As an Aviation Meteorological Authority, SAWS is designated by the state to provide weather services to the aviation industry, marine and a range of other identified clients and to fulfil a range of international obligations of the government of South Africa. SAWS is also the official provider of weather and climate information for the South African public and for commerce.


  
ICT Security Administrator (24 Months Contract)
The ICT Security Administrator is responsible for the administration, monitoring, implementation, and operational support of cybersecurity controls, technologies, and processes across the South African Weather Service. The role supports the Information Security Specialist in protecting the confidentiality, integrity, and availability of information assets through security operations, vulnerability management, identity and access management, incident response, compliance monitoring, cyber resilience activities, and cybersecurity awareness initiatives. The role further supports regulatory compliance, audit requirements, security reporting, and continuous improvement of the organisation's cybersecurity posture.


**Reference \#:** WS06/082026
  

Centurion
  

**Closing date:** 09 Sep 2026 23:59

ICT Security Administrator (24 Months Contract)

**Risk Analyst / Risk Manager – Remote****Enterprise Risk \| Compliance \| Governance \| Financial \& Operational Risk**

**Position Type:** Full\-Time, Remote  

**Working Hours:** U.S. Client Business Hours (with flexibility for reporting cycles, audits, and incident response)

**About the Role**
At Pavago, we’re hiring on behalf of one of our clients for a **Risk Analyst / Risk Manager** to identify, assess, monitor, and mitigate financial, operational, compliance, and enterprise risks across the organization.


This is a high\-impact role where you’ll help safeguard the business by developing risk frameworks, analyzing emerging threats, strengthening internal controls, and delivering actionable insights that support strategic decision\-making.


You’ll work closely with Finance, Operations, Compliance, Legal, IT, and Executive Leadership to ensure the organization remains compliant, resilient, and prepared for evolving business risks.


If you’re analytical, detail\-oriented, and enjoy translating complex risk data into practical business recommendations, this role is built for you.

**What You’ll Own****Enterprise Risk Assessment*** Conduct enterprise\-wide risk assessments across:
* + Financial risk
	+ Operational risk
	+ Compliance risk
	+ Market risk
	+ Cybersecurity risk
* Maintain and update:
* + Risk registers
	+ Control matrices
	+ Risk assessments
	+ Remediation trackers
* Identify emerging risks and prioritize mitigation activities.
* Partner with business leaders to strengthen proactive risk management practices.

**Risk Modeling \& Analytics*** Build and maintain quantitative risk models using:
* + SQL
	+ Excel
	+ Python
	+ R
	+ SAS
* Perform:
* + Stress testing
	+ Scenario analysis
	+ Sensitivity analysis
	+ Regression analysis
	+ Monte Carlo simulations
	+ Value at Risk (VaR) modeling
* Analyze trends, anomalies, and key risk indicators (KRIs).
* Deliver data\-driven recommendations to leadership.

**Compliance \& Regulatory Oversight*** Support compliance with applicable frameworks such as:
* + SOX
	+ Basel III
	+ Dodd\-Frank
	+ GDPR
	+ HIPAA
	+ PCI\-DSS
	+ Industry\-specific regulations
* Prepare quarterly and annual compliance reports.
* Support internal and external audits.
* Maintain audit\-ready documentation and evidence.
* Track remediation activities and regulatory deadlines.

**Internal Controls \& Governance*** Test and evaluate internal controls.
* Monitor incidents, exceptions, and risk events through Governance, Risk \& Compliance (GRC) platforms.
* Support governance committees with reporting and documentation.
* Partner with IT and Security teams on:
* + Cyber risk
	+ Vendor risk
	+ Operational resilience
* Recommend improvements to governance processes and internal controls.

**Reporting \& Executive Communication*** Build dashboards and reports using:
* + Power BI
	+ Tableau
	+ Looker
	+ Excel
* Present risk trends and mitigation recommendations to leadership.
* Translate technical risk findings into clear business insights.
* Maintain accurate documentation for executive reporting and audit purposes.

**Cross\-Functional Collaboration*** Work closely with:
* + Finance
	+ Operations
	+ Compliance
	+ Legal
	+ IT \& Security
	+ Executive Leadership
* Embed risk awareness into business processes.
* Support continuous improvement of enterprise risk management frameworks.

**Requirements****Must\-Have Qualifications****Experience*** 3\+ years of experience in:
* + Risk Management
	+ Enterprise Risk
	+ Compliance
	+ Audit
	+ Governance
* Experience working within regulated or compliance\-driven environments.

**Core Skills*** Strong proficiency in:
* + SQL
	+ Microsoft Excel
	+ Data analysis
* Experience using Governance, Risk \& Compliance (GRC) platforms such as:
* + Archer
	+ ServiceNow
	+ LogicManager
	+ Or similar solutions
* Strong understanding of:
* + Enterprise Risk Management (ERM)
	+ Internal controls
	+ Regulatory compliance
* Experience creating executive dashboards and risk reports.
* Excellent written and verbal English communication skills.

**Nice to Have*** Professional certifications such as:
* + FRM
	+ CFA
	+ CPA
	+ CCEP
* Experience with:
* + VaR
	+ Monte Carlo simulations
	+ Stress testing
* Background in:
* + Financial Services
	+ Healthcare
	+ SaaS
	+ Enterprise Technology
* Experience supporting board reporting or executive governance committees.
* Knowledge of:
* + Cyber risk
	+ Vendor risk
	+ Operational resilience
* Experience using:
* + Tableau
	+ Power BI
	+ Looker

**What Makes You a Strong Fit*** Strong analytical and quantitative mindset.
* Exceptional attention to detail.
* Able to simplify complex risk concepts for business stakeholders.
* Proactive in identifying issues before they become significant risks.
* Strong balance of technical expertise and business judgment.
* Comfortable managing multiple priorities in a fast\-paced environment.

**Tools \& Technologies*** SQL
* Microsoft Excel
* Python
* R
* SAS
* Power BI
* Tableau
* Looker
* Archer
* ServiceNow
* LogicManager
* Enterprise Risk Management (ERM) platforms

**What a Typical Day Looks Like*** Review dashboards for emerging operational, financial, or compliance risks.
* Run quantitative risk analyses and stress tests.
* Update risk registers and remediation trackers.
* Test internal controls and validate governance processes.
* Prepare executive reports and compliance documentation.
* Collaborate with business teams to strengthen risk mitigation strategies.
* Track remediation progress and regulatory deadlines.

**In short:** You serve as the organization’s early\-warning system—identifying, assessing, and mitigating risks before they impact the business.

**Key Metrics for Success (KPIs)*** Timely and accurate risk reporting.
* Internal controls tested and validated on schedule.
* Early identification and mitigation of business risks.
* Zero missed regulatory or audit deadlines.
* High\-quality executive reporting and dashboards.
* Positive audit outcomes and leadership confidence.

**Why Join Us?*** Make a direct impact on enterprise risk strategy.
* Work closely with executive leadership and cross\-functional teams.
* Influence governance, compliance, and operational resilience.
* Build scalable risk management frameworks.
* Fully remote role with long\-term growth opportunities.
* Clear career progression into:
* + Senior Risk Manager
	+ Enterprise Risk Lead
	+ Director of Risk \& Compliance
	+ Chief Risk Officer (CRO)

**Interview Process*** Application Review
* **Spark Hire Intro Video (3–5 minutes)**
* Recruiter Interview
* Practical Assessment (Risk Analysis \& Recommendations)
* Client Interview
* Offer \& Background Verification

**What Happens After You Apply**
Right after you apply, you’ll receive an email invitation from **Spark Hire** to record your **Intro Video**. This short, self\-recorded video is the final step that completes your application and can be recorded whenever it’s convenient for you.


Instead of repeating yourself across multiple screening calls, you’ll introduce yourself once, and your video will be shared with the hiring team. This helps hiring managers evaluate your communication style early, making future interviews more meaningful and reducing unnecessary interview rounds.


Don’t overthink it—you can record your video as many times as you’d like before submitting it. Only your final submission will be reviewed.


Please keep an eye on both your **inbox and spam folder** for your Spark Hire invitation after submitting your application.

**Apply Now**
If you’re a **Risk Analyst** or **Risk Manager** who enjoys identifying business risks, strengthening governance, improving compliance, and helping organizations make informed decisions, we’d love to hear from you. Apply today and play a key role in protecting and strengthening a growing business.

Risk Analyst

Reverside is an established IT services provider delivering Software Development, IT Resourcing, Digital Transformation, and Systems Support solutions. We are seeking a Cyber Security Engineer to join the Identity & Access Platforms team. The role focuses on implementing, configuring, securing, and operating identity governance and access management platforms across the organisation. Key Responsibilities Manage and support Active Directory and identity platforms. Implement and maintain authenti…

Cyber Security Engineer

Reverside is an established IT services provider delivering Software Development , IT Resourcing, Digital Transformation, and Systems Support solutions. We are seeking a Cyber Security Engineer specialising in Penetration Testing to identify vulnerabilities across applications, APIs, and internal systems. The role focuses on proactive security testing, risk identification, and providing actionable remediation recommendations. Key Responsibilities Conduct penetration testing across web applicati…

Cyber Security Engineer (Pen Tester)

Cybersecurity & Risk Specialist Department: Technology & Digital Transformation Nature of contract: Permanent Location: Cape Town About Cape Town Tourism At Cape Town Tourism, we believe tourism can make a meaningful difference to the lives of Capetonians. Our common purpose is simple: to improve the lives of Capetonians through tourism. As a Destination Marketing Organisation, we bring visitors to Cape Town, create a frictionless visitor experience, enable our members, strengthen the tourism i…

Cyber Security Specialist Cape Town

A worldwide logistics company with over 40 years of experience providing world-reowned supply chain services is looking for a Cybersecurity Assurance and Compliance Specialist to join their team in Gqeberha, Eastern Cape. Job Purpose: The Cybersecurity Assurance and Compliance Specialist is a key member of the Global IT Security team, responsible for leading the organization's governance, risk, and compliance (GRC) activities. This role ensures the organization maintains and advances its securi…

Cyber Security Assurance Specialist Gqeberha/Port Elizabeth

As the Information Security Analyst, you will be responsible for maintaining and enhancing the organisation's cyber security posture across all business units and hotels. You will lead security initiatives, monitor threats, drive compliance, manage incident response processes, and develop disaster recovery capabilities. This position requires a proactive professional who can balance technical expertise with strategic thinking while ensuring the business remains secure, compliant and operational…

Information Security Analyst

Role: Administrative Assistant to Financial Adviser Category: Administrative Location: Cape Town Salary: Market-related Are you a meticulous, self-motivated administrative professional with deep roots in the financial planning industry? Our client is looking for an experienced Administrative Assistant to support their team of financial advisers and deliver world-class service to a dedicated portfolio of clients. Key Responsibilities: Client Portfolio & Liaison: Take full ownership of a set clie…

Administrative Assistant to Financial Adviser (afrikaans speaking)

Reference: JHB000828-KP-1 Join a Leading Hospitality Group and Help Secure the Future of Technology. Gijima Staffing Solutions is recruiting on behalf of a respected national hospitality group for an experienced Information Security Analyst based at their Support Office. This is an exciting opportunity for a security-focused IT professional who is passionate about cyber security, risk mitigation, governance, compliance and business continuity. The successful candidate will play a critical role …

Information Security Analyst JHB - Northern Suburbs

Empowering Africa’s tomorrow, together…one story at a time. With over 100 years of rich history and strongly positioned as a local bank with regional and international expertise, a career with our family offers the opportunity to be part of this exciting growth journey, to reset our future and shape our destiny as a proudly African group. Job Summary Lead the agile solution design, deployment & ongoing optimization & evolution of enterprise wide technology products and services (full stack engi…

Lead Technology Partner-2

DFIR Consultant - Speculative South Africa | Remote with travel Permanent Note: This is a real job with one of South Africa's foremost DFIR experts. Because they are exploring candidates in a speculative approach, we are keeping it broad. If you have any questions, please do just let me know. A specialist cyber security consultancy is looking to engage with experienced DFIR professionals who have a strong blend of digital forensics, incident response, and investigative capabilities. This opport…

DFIR Consultant - Speculative

Role and Responsibilities Security Monitoring and Alert Triage: Monitor security event logs and alerts generated by security tools such as SIEM, IDS/IPS and firewall logs. Analyze alerts to determine their severity and relevance to the client’s security posture. Perform initial triage of security events to differentiate between false positives, true positives or any other possible security incidents. Communicate with IT Management or end-users where necessary to perform troubleshooting / invest…

Security Engineer L1 - Umhlanga

Reverside is an established IT services provider delivering Software Development, IT Resourcing, Digital Transformation, and Systems Support solutions. We are seeking a Cyber Security Engineer specialising in Penetration Testing to identify vulnerabilities across applications, APIs, and internal systems. The role focuses on proactive security testing, risk identification, and providing actionable remediation recommendations.
   

  

 Key Responsibilities
   

  

* Conduct penetration testing across web applications, APIs, and internal systems.
* Participate in scoping sessions and define testing requirements.
* Perform security assessments, particularly across web and API environments.
* Identify, analyse, and document vulnerabilities.
* Provide clear and actionable remediation recommendations.
* Engage with stakeholders to discuss findings and remediation.
* Research and improve security testing methodologies.
* Support senior team members with complex security assessments.


**Qualifications \& Experience**
* 6\+ years' professional penetration testing experience.
* Strong web application and API security experience.
* Experience with Burp Suite or similar security testing tools.
* Strong understanding of OWASP Top 10 and common vulnerabilities.
* Ability to read and understand a programming/scripting language such as Python, Bash, PowerShell, Java, or PHP.
* Strong analytical, problem\-solving, and communication skills.
* Ability to manage the full penetration testing lifecycle from scoping to reporting.
* Grade 12 / Matric required.
* Tertiary qualification or relevant IT/Cyber Security certification. Preferred


 Certifications
   

  

* OSCP – Offensive Security Certified Professional
* eWPT – eLearnSecurity Web Penetration Tester
* Burp Suite Certified Practitioner


 Core Skills
   

  

* Penetration Testing
* Web Application Security
* API Security
* Burp Suite
* OWASP Top 10
* Vulnerability Assessment
* Security Testing
* Python/Bash/PowerShell
* Risk \& Remediation
* Cyber Security


**Desired Skills**
* Python/Bash/PowerShell
* Risk \& Remediation
* Cyber Security


**Desired Qualification Level**
* Certificate

Cyber Security Engineer (Pen Tester) at reversidesoftwaresolutionspt

**About the Role** 




 We’re looking for a proactive and detail\-oriented
 **Cyber Security Analyst L2/L3** 
 to join a growing security team
 *(office based with flexibility).* 
 This role is ideal for someone passionate about defending modern cloud environments and working hands\-on with the Microsoft security stack.
 



 You’ll play a key role in monitoring, detecting, and responding to threats across a Microsoft\-centric ecosystem, helping to strengthen overall security posture while ensuring compliance across cloud and on\-prem environments.
 



  





  





**Key Responsibilities** 




**Security Monitoring \& Incident Response** 



* Monitor, triage, and investigate alerts using Microsoft Sentinel (SIEM/SOAR)
* Respond to incidents including malware, phishing, identity compromise, and data exfiltrations
* Conduct root cause analysis and produce detailed incident report
* Develop and optimise detection rules, dashboards, and automation workflows



**Microsoft Defender Security Operations** 



* Manage and operate Microsoft Defender (Endpoint, Identity, Cloud Apps, Office 365\)
* Investigate threats using Defender XDR
* Tune alerts to improve detection accuracy and reduce false positives
* Work with IT teams to remediate vulnerabilities



**Cloud \& Identity Security (Azure)** 



* Secure Azure workloads, networks, and identities
* Support Zero Trust implementation
* Apply best practices (RBAC, Conditional Access, MFA)
* Monitor logs and security telemetry across Azure services



**Network Security** 



* Manage and monitor Fortinet solutions (FortiGate, FortiAnalyzer, FortiManager)
* Investigate suspicious network activity and threats
* Support firewall rule reviews, segmentation, VPN security, and IDS/IPS tuning
* Integrate network logs into Microsoft Sentinel



**Security Playbooks \& Automation** 



* Develop and maintain incident response playbooks
* Align processes with MITRE ATT\&CK and organisational policies
* Test and refine playbooks through simulations and real incidents
* Maintain clear, auditable documentation



**Vulnerability Management** 



* Support full vulnerability lifecycle: discovery, assessment, prioritisation, remediation
* Work with Microsoft Defender Vulnerability Management and other tools
* Track remediation progress and report on risk reduction



**Data Protection \& Compliance** 



* Support Microsoft Purview (DLP, data classification, compliance reporting)
* Monitor and respond to DLP alerts
* Assist with compliance initiatives (POPIA, ISO 27001, GDPR where applicable)



**Continuous Improvement \& Collaboration** 



* Contribute to security policies and best practices
* Collaborate with infrastructure, cloud, and development teams
* Stay up to date with emerging threats and technologies



  





**Required Skills \& Experience** 




**Technical Skills** 



* Hands\-on experience with Microsoft Sentinel
* Strong experience with Microsoft Defender suite
* Solid understanding of Microsoft Azure (IAM, networking, security controls)
* Experience with Microsoft Purview
* Knowledge of SIEM/SOAR concepts and MITRE ATT\&CK framework
* Strong understanding of identity and access management and cloud security



**Experience** 



* 3\+ years in a Security Analyst / SOC / Cyber security role
* Experience securing Microsoft 365 and Azure environments
* Proven incident response and threat investigation experience



**Certifications (Advantageous)** 



* CompTIA Security\+, CISSP, or similar
* Microsoft SC\-200, AZ\-500, SC\-400



  





 Why Join?
 


* Work with modern Microsoft security technologies
* Exposure to enterprise\-scale cloud and hybrid environments
* Collaborative and forward\-thinking team
* Opportunity to grow within a maturing security function



  





 Apply today!

Cyber Security Analyst

**About the Role**

We are looking for a motivated and security\-focused Junior Cyber Security Analyst to join our technical security operations team. You will be responsible for monitoring our systems, applications, infrastructure and security alerts around the clock. This is a hands\-on entry\-level role suited to someone who is highly observant, willing to learn, and interested in cybersecurity, threat detection and incident response. Because our systems operate 24/7, the successful candidate must be comfortable working rotational shifts, including nights, weekends and public holidays.

**Key Responsibilities**

● Monitor security dashboards, logs, alerts and system activity.

● Identify and investigate suspicious or unusual user and system behaviour.

● Monitor vulnerability and security alerts across applications and infrastructure.

● Perform initial investigation and classification of security incidents.

● Escalate confirmed or high\-risk incidents to senior technical/security team members.

● Track security incidents from detection through resolution.

● Monitor authentication attempts, failed logins and potentially compromised accounts.

● Identify potential malware, phishing, brute\-force and unauthorised\-access activity.

● Review application and server logs for suspicious activity.

● Assist with vulnerability monitoring and basic security assessments.

● Maintain accurate incident and investigation records.

● Assist with security audits, reports and compliance requirements.

● Monitor system availability and flag unusual technical activity that may indicate a security issue.

● Follow established incident\-response and escalation procedures.

● Participate in security handovers between shifts.

● Stay informed about common cybersecurity threats and attack techniques.

● Assist the wider engineering team with security\-related investigations when required.

**Shift Responsibilities**

**The role operates on a 24/7 three\-shift rotational schedule.**

**You may be required to work:**

● Morning shifts

● Afternoon/evening shifts

● Night shifts

● Weekends

● Public holidays A structured handover is required at the end of every shift to ensure active incidents, alerts and investigations are properly transferred to the next analyst.

**Minimum Requirements**

● Grade 12 / Matric.

● Diploma, certificate or relevant qualification in Cybersecurity, Information Technology, Computer Science or a related field is advantageous.

● Basic understanding of cybersecurity principles.

● Understanding of networking fundamentals such as TCP/IP, DNS, HTTP/HTTPS and ports. ● Basic understanding of Linux and/or Windows environments.

● Ability to read and understand system/application logs.

● Strong analytical and problem\-solving skills.

● Excellent attention to detail.

● Good written and verbal communication.

● Ability to remain calm and follow procedures during security incidents.

● Willingness to work rotational 24/7 shifts.

**Advantageous Skills Experience or knowledge of the following will be advantageous:**

● SIEM platforms

● SOC operations

● Log management and monitoring

● Vulnerability scanners

● Endpoint security

● Firewalls and network security

● Cloud security

● Incident response

● Threat intelligence

● OWASP and web application security

● Linux administration

● SQL and database security

● AWS, Azure or Google Cloud

● Security frameworks such as ISO 27001 or NIST

Pay: From R7 000,00 per month

Work Location: In person

Junior Cyber Security Analyst

*Title:* Principal Security \& DevOps Engineer


*Job type:* Full\-Time Permanent


*Working arrangement:* 3 days a week onsite/hybrid. No


*Salary:* Negotiable / DOE  



  

  

**About Us**

  

Integrity360 is a leading independent cybersecurity and PCI specialist operating across Europe, Africa, the Caribbean, and North America. The company has office locations in Ireland, the UK, Bulgaria, Italy, Sweden, Spain, Lithuania, Ukraine, Africa, the Caribbean, and Canada, supported by seven Security Operations Centres (SOCs) located in Dublin, Sofia, Madrid, Stockholm, Rome, Johannesburg and Cape Town.  



  

With over 780 employees, including more than 585 dedicated cybersecurity professionals, Integrity360 delivers a full suite of professional, support, and managed security services. These span the complete cyber risk lifecycle, from identification and prevention to detection, response, and recovery. Integrity360 supports over 3000 mid\-market and enterprise organisations across sectors including financial services, insurance, government, healthcare, retail, telecommunications, and utilities.  

  



  

At Integrity360, people come first. We invest heavily in learning, development and progression, fostering a dynamic culture where innovation, collaboration and continuous growth are at the heart of what we do. If you're ready to take your cyber security career to the next level, we’d love to hear from you.  



  

  

  

**Job Role / Responsibilities**

  

  

As a **Principal Security \& DevOps Engineer** , you will provide senior technical leadership across our Security Operations capability, with a particular focus on **detection engineering, security research, SOC automation, threat hunting, and the continued development of our fraud monitoring platform** .  



  

This is a highly technical role for an individual who is comfortable operating with a high degree of autonomy and taking ownership of complex technical problems from concept through to implementation.


You will operate as a senior member of the technical leadership team, helping define the direction of our detection and research capabilities while continuing to work hands\-on across security engineering, software development, research and automation.  

  



  

The ideal candidate is equally comfortable investigating how a new attack technique works, reproducing an exploit in a controlled environment, writing software to automate a security process, developing a new detection, and turning that work into a repeatable capability for the wider SOC.  

  



  

This is **not a traditional SOC monitoring or incident\-response role** . The focus is on building and improving the technology, methodologies and intelligence that enable the SOC to operate more effectively.  



  

**Key Responsibilities**

  

  

* **Detection Engineering \& Threat Hunting**
	+ Develop and maintain security detections across the technology stack.
	+ Execute hypothesis\-driven threat hunts and translate attacker TTPs into practical detections.
	+ Map capabilities to MITRE ATT\&CK and identify coverage gaps.
* **Fraud Monitoring Platform Development**
	+ Lead the development of the fraud and abuse monitoring platform.
	+ Design analytics, detection logic, and integrations to identify abuse patterns within business applications.
* **Security Automation \& SOAR**
	+ Design and develop automation to improve SOC efficiency.
	+ Build automated enrichment, investigation, and response workflows (SOAR playbooks).
* **Security Research \& Development**
	+ Conduct independent research into emerging threats, vulnerabilities, and attack techniques.
	+ Reproduce exploits in a controlled environment to validate findings.

**Technical Leadership \& Autonomy**

* Provide technical leadership and establish standards for engineering activities.
* Conduct quality reviews and act as a senior technical decision\-maker.
Operate with a high degree of autonomy, owning projects from concept to implementation.  
* 

  

**Technical En** **vironment**

  

The successful candidate should be comfortable working across a broad security and software engineering environment, including:


* SIEM
* EDR/XDR technologies
* SOAR and security automation
* Threat hunting
* Vulnerability research and exploitation
* Network security and networking technologies
* Python
* SQL
APIs and system integrations  
* 

  

**Required Experience \& Skills**

* Minimum 3 years of professional experience in cybersecurity, software development, or a combination of both with a strong security focus.
* Demonstrated experience developing software, automation or security tooling.
* Strong Python development capability.
* Strong understanding of security monitoring and detection engineering.
* Experience working with SIEM, security analytics and large\-scale security telemetry.
* Experience designing and developing integrations between security platforms and other systems.
* Strong understanding of networking and network security principles.
* Ability to translate security research into practical detections, automation or engineering solutions.
* Strong analytical and problem\-solving ability.
* Excellent technical documentation skills.
* Ability to work independently with minimal supervision.
* Demonstrated initiative and a willingness to research unfamiliar technologies and problems.
Ability to manage multiple technical projects and prioritise work effectively.  
* 

  

  

**Certifications/Qualifications**

* A relevant **degree, diploma or equivalent formal qualification** is preferred.
* However, demonstrated professional experience and technical capability will be considered equally important. Candidates who can demonstrate strong practical cybersecurity or software\-development experience without a traditional academic background will be considered.
* **Industry certifications are not a primary requirement for this position.** Demonstrated technical ability, initiative, engineering capability and practical experience are more important.

Principal Security & DevOps Engineer

**Principal Security \& Detection Engineer**

*Title:* Principal Security \& Detection Engineer


*Job type:* Full\-Time Permanent


*Working arrangement:* 3 days a week onsite/hybrid. No


*Salary:* Negotiable / DOE  



  

  

**About Us**

  

  

Integrity360 is a leading independent cybersecurity and PCI specialist operating across Europe, Africa, the Caribbean, and North America. The company has office locations in Ireland, the UK, Bulgaria, Italy, Sweden, Spain, Lithuania, Ukraine, Africa, the Caribbean, and Canada, supported by seven Security Operations Centres (SOCs) located in Dublin, Sofia, Madrid, Stockholm, Rome, Johannesburg and Cape Town.  



  

  

With over 780 employees, including more than 585 dedicated cybersecurity professionals, Integrity360 delivers a full suite of professional, support, and managed security services. These span the complete cyber risk lifecycle, from identification and prevention to detection, response, and recovery. Integrity360 supports over 3000 mid\-market and enterprise organisations across sectors including financial services, insurance, government, healthcare, retail, telecommunications, and utilities.  



  

  

At Integrity360, people come first. We invest heavily in learning, development and progression, fostering a dynamic culture where innovation, collaboration and continuous growth are at the heart of what we do. If you're ready to take your cyber security career to the next level, we’d love to hear from you.  



  

  

  

  

**Job Role / Responsibilities**

  

  

As a **Principal Security \& Detection Engineer** , you will provide senior technical leadership across our Security Operations capability, with a particular focus on **detection engineering, security research, SOC automation, threat hunting, and the continued development of our fraud monitoring platform** .  



  

  

This is a highly technical role for an individual who is comfortable operating with a high degree of autonomy and taking ownership of complex technical problems from concept through to implementation.


You will operate as a senior member of the technical leadership team, helping define the direction of our detection and research capabilities while continuing to work hands\-on across security engineering, software development, research and automation.  



  

  

The ideal candidate is equally comfortable investigating how a new attack technique works, reproducing an exploit in a controlled environment, writing software to automate a security process, developing a new detection, and turning that work into a repeatable capability for the wider SOC.  



  

  

This is **not a traditional SOC monitoring or incident\-response role** . The focus is on building and improving the technology, methodologies and intelligence that enable the SOC to operate more effectively.  



  

**Key Responsibilities**

  

  

* **Detection Engineering \& Threat Hunting**
	+ Develop and maintain security detections across the technology stack.
	+ Execute hypothesis\-driven threat hunts and translate attacker TTPs into practical detections.
	+ Map capabilities to MITRE ATT\&CK and identify coverage gaps.
* **Fraud Monitoring Platform Development**
	+ Lead the development of the fraud and abuse monitoring platform.
	+ Design analytics, detection logic, and integrations to identify abuse patterns within business applications.
* **Security Automation \& SOAR**
	+ Design and develop automation to improve SOC efficiency.
	+ Build automated enrichment, investigation, and response workflows (SOAR playbooks).
* **Security Research \& Development**
	+ Conduct independent research into emerging threats, vulnerabilities, and attack techniques.
	+ Reproduce exploits in a controlled environment to validate findings.

**Technical Leadership \& Autonomy**

* Provide technical leadership and establish standards for engineering activities.
* Conduct quality reviews and act as a senior technical decision\-maker.
Operate with a high degree of autonomy, owning projects from concept to implementation.  
* 

  

  

  

  

**Technical En** **vironment**

  

The successful candidate should be comfortable working across a broad security and software engineering environment, including:


* SIEM
* EDR/XDR technologies
* SOAR and security automation
* Threat hunting
* Vulnerability research and exploitation
* Network security and networking technologies
* Python
* SQL
APIs and system integrations  
* 

  

  

**Required Experience \& Skills**

* Minimum 3 years of professional experience in cybersecurity, software development, or a combination of both with a strong security focus.
* Demonstrated experience developing software, automation or security tooling.
* Strong Python development capability.
* Strong understanding of security monitoring and detection engineering.
* Experience working with SIEM, security analytics and large\-scale security telemetry.
* Experience designing and developing integrations between security platforms and other systems.
* Strong understanding of networking and network security principles.
* Ability to translate security research into practical detections, automation or engineering solutions.
* Strong analytical and problem\-solving ability.
* Excellent technical documentation skills.
* Ability to work independently with minimal supervision.
* Demonstrated initiative and a willingness to research unfamiliar technologies and problems.
Ability to manage multiple technical projects and prioritise work effectively.  
* 

  

  

**Certifications/Qualifications**

* A relevant **degree, diploma or equivalent formal qualification** is preferred.
* However, demonstrated professional experience and technical capability will be considered equally important. Candidates who can demonstrate strong practical cybersecurity or software\-development experience without a traditional academic background will be considered.
* **Industry certifications are not a primary requirement for this position.** Demonstrated technical ability, initiative, engineering capability and practical experience are more important.

Principal Security & Detection Engineer

Parvana Strategic Sourcing has established itself as a leading provider of permanent and temporary recruitment services to the South African, European and UK marketplace. In addition to this we have enjoyed considerable success in Australia and other part Location: Cape Town | Work Type: Hybrid | Contract Duration: 12 months | Job ID: J107192 About our client: Our client is a global investment advisory firm focusing on long-term value creation through investment strategies. They work with a div…

Cyber Security Engineer Cape Town

DataFin was established in 1999. We pride ourselves on the fact that we have established relationships with industry leaders and a vast majority of our business is repeat business. ENVIRONMENT: LEAD and support Information Security Governance, Risk Management, Compliance & Security Assurance activities of a PE-based global Logistics Operation urgently seeking a Cybersecurity Assurance & Compliance Specialist. This role is responsible for maintaining and advancing Security Certification programs…

Cyber Security Assurance Specialist Port Elizabeth

Parvana Strategic Sourcing has established itself as a leading provider of permanent and temporary recruitment services to the South African, European and UK marketplace. In addition to this we have enjoyed considerable success in Australia and other part Location: Cape Town | Work Type: Hybrid | Contract Duration: 12 months | Job ID: J107190 About our client: Our client is a global investment advisory firm focusing on long-term value creation through investment strategies. They work with a div…

Security Operations Engineer Cape Town

**Role and Responsibilities**


Security Monitoring and Alert Triage:

* Monitor security event logs and alerts generated by security tools such as SIEM, IDS/IPS and firewall logs.
* Analyze alerts to determine their severity and relevance to the client’s security posture.
* Perform initial triage of security events to differentiate between false positives, true positives or any other possible security incidents.
* Communicate with IT Management or end\-users where necessary to perform troubleshooting / investigation.

  

Incident Detection and Response:

* Investigate and analyze security incidents detected through monitoring tools.
* Follow documented procedures for incident handling and escalation, ensuring timely response and resolution within SLA.
* Coordinate with other teams within the SOC or across the organization to contain and mitigate security incidents.

  

Threat Intelligence Analysis:

* Stay updated with the latest cybersecurity threats, vulnerabilities, and attack techniques.
* Analyze threat intelligence data to identify potential risks to client’s organization infrastructure and systems.
* Utilize threat intelligence to enhance security monitoring and incident response capabilities.

  

Reporting and Documentation:

* Generate regular and monthly reports on security events, incidents, systems and trends for management and stakeholders.
* Maintain consistent ticket management and accurate documentation, for security incidents and alerts, including their timelines, actions taken, recommended remediation, and evidence for future reference and improvement.

  

Vulnerability Management:

* Assist in vulnerability scanning and assessment activities to identify weaknesses in the organization's systems and applications.
* Collaborate with the vulnerability management team to identify, prioritize, report and where necessary remediate, vulnerabilities within established timelines.

  

Anti\-Virus Management:

* Monitor anti\-virus and endpoint protection systems for malware detections and alerts.
* Investigate and respond to malware incidents, including malware analysis and containment measures.
* Coordinate with the IT team to ensure proper configuration and updates of anti\-virus software, policies and management platforms.

  

Additional Duties:

* Assist in the maintenance and optimization of SOC tools and technologies.
* Participate in security awareness training and initiatives.
* Collaborate with other teams within the cybersecurity function, such as threat hunting and forensics, for proactive security measures.
* Participate in on\-call rotations for after\-hours incident response and support.

 **Note:** The Level 1 SOC Analyst may also be required to perform other duties as assigned, depending on the specific needs and priorities of the organization's security operations. This could include involvement in projects related to security architecture, compliance audits, or emerging security technologies.


Soft Skills and attributes

* Security Engineer L1 must be able to demonstrate the following:
* + Ability to be self\-managed and work independently, or as part of a team
	+ Excellent communication skills
	+ Attention to detail
	+ Research new technologies and techniques used in the cyber security industry
	+ Keen analytical ability related to the diagnosis of policy violations and their impact / risk within the monitored environment
	+ Consistent, prompt delivery in often common or repetitive tasks
	+ Escalate, but maintain visibility of, suspected threats beyond current technical ability
	+ Fundamental understanding of technologies and concepts involved in security monitoring (Active Directory, Firewalls, Anti\-Virus / EDR and basic Networking principles)
	+ Ability to multi\-task and keep track of, and manage expectations with regards to multiple security alerts on a daily basis
	+ Keen interest in finding the root cause of security incidents or alerts
	+ Fundamental understanding of Microsoft \& 3rd Party Patch Management concepts
	+ Ability to utilize the full capability of the SIEM platform

**Qualifications and Education Requirements**
=============================================

* Matric is essential
* S\+ or equivalent certification
* Bachelor’s degree in Computer Science or Information Technology Diploma (Beneficial)

**Preferred Skills**
====================

* Should have proven excellence as a Service Desk Engineer or in another relevant position

Our client is a forward\-thinking technology business that believes great engineering and great security should go hand in hand. They are building modern cloud platforms, investing in automation, AI, and scalable infrastructure, and they are looking for a DevSecOps Engineer to help lead the charge. This is a hands\-on opportunity to embed security controls, strengthen AWS environments, and champion a security\-first culture across engineering teams. If you are the type of person who sees a manual process and immediately wants to automate it, sees a security risk ad wants to engineer it out of existence, and hears "we've always done it this way" as a challenge rather than an explanation, you'll fit right in.
 



  





**Key responsibilities**
 :
 



  




* Be the guardian of the gates, building security into every deployment, pipeline, and platform before threats even get a chance to knock.
* Hunt down vulnerabilities like a digital bounty hunter and automate their detection before they become tomorrow's problem.
* Turn security best practices into engineering superpowers by embedding them directly into CI/CD pipelines and development workflows.
* Design cloud environments that are secure, resilient, and ready for anything the internet decides to through at them.
* Champion the "shift\-left" movement, helping developers catch issues early when fixes are quick and coffee consumption remains reasonable.
* Build security guardrails that keep teams moving fast without driving off a compliance cliff.
* Partner with engineers, architects, and technology leaders to make security everyone's responsibility, not just a team's job title.
* Transform complex security risks into practical solutions that real humans can actually understand and implement.
* Create visibility across the platform through monitoring , reporting, and observability, because you can't protect what you cant see.
* Explore emerging technologies and AI\-driven solutions that push the boundaries of what's possible in modern security engineering.
* Lead the charge toward a secure\-by\-design future where security is woven into every decision, every release, and every success story.
* **In short:** 
 You'll be part of security strategist, part automation wizard, part cloud defender, and part engineering enabler, helping build platforms that are as secure as they are innovative.



  





**Job Experience and Skills Required:**




  




* You've built a career in DevSecOps, Security Engineering, or Cloud Security and know how to stop problems before they start.
* Terraform, AWS, CI/CD, and automation are your trusted sidekicks.
* You know your way around security frameworks, cloud security, IAM, encryption, and secure\-by\-design principles.
* SAST, DAST, vulnerability management, and security tooling aren't just buzzwords on your CV, they're tools you've used in the real world.
* You're constantly looking for smarter, faster, more secure ways of doing things.
* You solve problems, automate repetitive tasks, and leave every platform stronger than you found it.



  





**Bonus points if:** 



* You've worked with TypeScript, Java, Datadog, Rapid7, or CrowdStrike.
* AI, emerging technology, and security innovation genuinely excite you.

Cyber Security Jobs in Stellenbosch - Page 3

Vacancies (page 3 of 6)