Browse 803 live cyber security jobs across South Africa. Salary guide, top employers and free apply links. Updated regularly.

**Responsibilities**
**Job Responsibilities:**
* Participate and coordinate efforts to implement NIST Security Controls Framework across the BET Software.
* Monitor and audit logs across all product lines of the BET software’s environment.
* Perform audits on roles and permissions.
* Collect and report on key metrics such as uptime, outages, cyberattacks
* Perform internal privacy impact assessments.
* Provide Security Training \& Awareness to BET Software team members and contractors.
* Participate as a key member of the Incident Response Team.
* Monitor the collection and storage of sensitive information such as PII, PHI and PCI related data.
* Participate in Due Diligence and Contract Reviews.


**Living The Spirit**
* Embrace authenticity by recognizing that each team member's unique perspective, background, and ideas enrich our collective approach to security.
* By daring to be ourselves, we contribute to a diverse and dynamic environment, fostering innovation and adaptability.
* We thrive on the exhilaration of safeguarding our organization's digital assets in an ever\-evolving landscape of cyber threats.
* Each day presents new challenges, and we approach them with curiosity, resilience, and a sense of adventure. This attitude fuels our drive to stay at the forefront of IT security.
* We firmly believe that a unified team is the cornerstone of our success. We actively collaborate, share knowledge, and support each other. Our spirit of teamwork extends beyond our immediate team to include our colleagues from various departments. We encourage and embrace the idea of Team work makes the dream work as we all work together to achieve business goals
* Empower and enable team members to be themselves, fostering an environment where individual strengths shine.
* Act as a mentor and coach to team members, fostering their growth and development
* Exhibit good leadership in crisis situations, guiding the team through challenging and high\-pressure scenarios.
* Uphold high moral and ethical standards in all your actions and decisions.
* We wholeheartedly embrace the responsibilities that come with the role, from monitoring security access to analyzing security breaches. We proactively raise our hands, taking initiative to protect our organization's assets and uphold the highest standards of information security.


**Qualifications**
**Job Specification:**
* Bachelor's degree in computer science or related field will be advantageous
* A minimum of 3\-5 years’ experience with
+ Server Operating Systems, Networking, Security
+ OWASP
+ working with security standards and best practices
+ systems management
+ working in a SOC \| Experience working with a SIEM platform \- QRadar \| splunk \| alienvault \| chronicle etc

* Preferred certification:
+ Network\+ Certification
+ Security\+ Certification
+ CEH (Certified ethical hacker)

Intermediate Security Analyst

**Job Description**
* IAM expertise: RBAC, access reviews, identity lifecycle, SSO, MFA, conditional access, PAM, Zero Trust
* Endpoint security: EDR/XDR, MDM/UEM, hardening, patching, compliance, and incident response
* Data protection: DLP, data classification, sensitivity labelling, retention policies, regulatory compliance
* Email \& collaboration security: phishing/BEC detection, malware analysis, URL protection, SharePoint/OneDrive security
* Automation: user/device provisioning \& deprovisioning, security workflows, basic scripting (PowerShell/Python)
* Incident response: ransomware, phishing, malware, identity threats, and data loss events
* Governance \& risk: security metrics, reporting, audits, risk assessments, and policy enforcement
* Strong analytical skills, problem\-solving, cross\-team collaboration, and continuous security improvement


**Responsibilities**
**Identity Security**
 Implement and support identity and access management (IAM) processes, including:
   

  

* Role\-based access control (RBAC) assignments
* Access reviews and certifications
* Group and permission management


**Support And Maintain**
* Single Sign\-On (SSO) integrations
* Multi\-Factor Authentication (MFA) enforcement
* Conditional access policies


**Assist In The Administration Of**
* Privileged Access Management (PAM) solutions
* Identity Governance processeS
* Perform periodic access reviews and identify excessive or inappropriate privileges. Support the enforcement of least privilege and Zero Trust principles. Collaborate with all teams to ensure correct access provisioning and governance.


**Endpoint Security**
**Operate And Maintain Endpoint Security Tools Including**
* Endpoint Detection and Response (EDR/XDR)
* Anti\-malware solutions
* Mobile Device Management (MDM) / UEM platforms


 Assist with endpoint hardening and configuration baselines.
   

  

 Support patching and vulnerability remediation efforts in collaboration with infrastructure teams.
   

  

 Ensure endpoint compliance with organizational security policies.
   

  

 Assist in device onboarding, provisioning, and secure configuration.
   

  

 Support incident response activities related to compromised or non\-compliant devices.
   

  

**Drive Automation Of**
* Endpoint provisioning and de\-provisioning
* User provisioning and de\-provisioning
* Compliance monitoring
* Threat containment and isolation workflows


**Data Protection**
 Implement and operate Data Loss Prevention (DLP) capabilities across endpoints, email, and collaboration platforms
   

  

**Assist In The Implementation And Management Of**
* Data classification and sensitivity labelling
* Data protection policies across email, file storage, and endpoints
* Data lifecycle and retention controls
* Support enforcement of data protection policies aligned with business and regulatory requirements.


**Email Security**
 Operate and maintain email security controls (e.g. Mimecast or similar platforms), including:
   

  

* Anti\-phishing and impersonation protection
* Anti\-malware and attachment scanning
* URL protection and link rewriting


**Monitor And Investigate Email Security Alerts, Including**
* Phishing attempts
* Business Email Compromise (BEC)
* Malicious attachments and links
* Assist in tuning email security policies to improve detection and reduce false positives. Collaborate across the business to reduce risks associated with account compromise and email\-based attack vectors.


**Collaboration \& Data Exposure Controls**
 Assist in securing collaboration platforms (e.g. SharePoint, OneDrive, file shares), including:
   

  

* External sharing controls
* Data access restrictions
* Misconfiguration and exposure risk identification
* Investigate and respond to security incidents and escalations across identity, endpoint, data protection, and email domains, including ransomware, malware outbreaks, device compromise investigations, DLP events, and phishing attempts.


**Governance, Metrics \& Risk**
 Assist in tracking and reporting on key metrics such as:
   

  

* MFA adoption
* Endpoint compliance
* Patch status
* Access review completion
* Data classification and labelling
* Email security statistics
* Document incidents, findings, and remediation actions
* Support audit activities and provide evidence for identity and endpoint controls
* Identify opportunities for automation and process improvements
* Stay up to date with emerging threats and vulnerabilities related to identity and endpoints
* Conduct risk assessments related to identity systems and endpoint environments
* Research and conduct proof of concepts for new identity and endpoint security technologies
* Continuously assess emerging threats such as identity\-based attacks, phishing, token theft, ransomware, and zero\-day exploits


**Qualifications**
 Required Qualifications
   

  

 3–5 years of experience in identity security, endpoint security, or IT security roles.
   

  

**Hands\-on Experience With**
* Microsoft Entra ID / Azure AD or equivalent IAM platforms
* Active Directory (on\-prem and hybrid)
* SSO and MFA implementations
* PAM solutions
* EDR/XDR platforms
* MDM/UEM solutions
* Endpoint hardening and security baselines
* Data Loss Prevention (DLP) technologies
* Email security platforms (e.g. Mimecast or similar)


**Solid Understanding Of**
* Zero Trust Concepts
* Identity and access management principles
* Endpoint security and hardening
* Access control models (RBAC, ABAC)
* Scripting/automation (PowerShell, Python, Bash, etc.)
* Log analysis, security monitoring, and incident response
* Experience with incident investigation and troubleshooting


 Certifications in relation to the above criteria.

Intermediate Identity and Endpoint Security Engineer

You are as unique as your background, experience and point of view. Here, you’ll be encouraged, empowered and challenged to be your best self. You'll work with dynamic colleagues \- experts in their fields \- who are eager to share their knowledge with you. Your leaders will inspire and help you reach your potential and soar to new heights. Every day, you'll have new and exciting opportunities to make life brighter for our Clients \- who are at the heart of everything we do.
   

  

 At Sun Life, we're driven by our Purpose: helping our Clients achieve lifetime financial security and live healthier lives. Our values shape how we work: caring, authentic, bold, inspiring, and impactful.
   

  

 When you join Sun Life, you'll work with passionate colleagues and empowering leaders who support your growth and celebrate your contributions, so you can make a meaningful difference in our Clients' lives.
   

  

 Discover how you can make a difference in the lives of individuals, families and communities around the world.
   

  

**Job Description:**
 At Sun Life, we work together, share common values, and encourage growth and achievement. We are seeking a skilled
 **Penetration Testing Analyst** 
 to perform hands\-on security testing of applications, infrastructure, and systems.
   

  

 This role is primarily focused on
 **Penetration Testing delivery** 
 , with
 **secondary exposure to Red Team activities** 
 , contributing to adversary simulation exercises where required. The successful candidate will have strong technical testing capabilities, with an interest in developing broader offensive security skills.
   

  

**Key Responsibilities**
* Perform web, API, mobile, and infrastructure penetration testing across enterprise applications.
* Identify, exploit, and validate security vulnerabilities using manual testing techniques and industry tools.
* Conduct testing in line with established methodologies and security frameworks (e.g., OWASP).
* Produce clear, structured reports outlining:
+ Vulnerabilities and root cause
+ Business impact and risk rating
+ Practical remediation recommendations

* Perform research into new vulnerabilities, exploits, and attack techniques to enhance testing coverage.
* Support re\-testing activities to validate remediation of identified issues.
* Support Red Team activities where required.
* Contribute to reconnaissance and attack surface mapping, Identification of potential attack paths.
* Support documentation of attack paths and identified security gaps.
* Assist in controlled exploitation activities under guidance, including:
+ Initial access techniques
+ Limited post\-exploitation validation (e.g., privilege escalation concepts, lateral movement awareness)
+ Collaborate with senior team members to understand real\-world attacker behaviour and techniques.

**Required Skills \& Experience**
**Core Penetration Testing Skills (Essential)** 

* 2\+ years of hands\-on experience in:
+ Web application security testing (OWASP Top 10\)
+ API security testing
+ Basic network/infrastructure testing

* Strong understanding of:
+ Authentication, session management, and access control flaws
+ Input validation and injection vulnerabilities

* Experience with tools such as:
+ Burp Suite, Nmap, sqlmap, or similar

* Ability to perform manual testing beyond automated scanning.
* Strong documentation and reporting skills, with focus on clear risk articulation.


**Red Teaming Skills (Desirable – Foundational Level)**
* Basic understanding of adversary simulation concepts and attack lifecycle.
* Familiarity with:
+ Reconnaissance techniques
+ Common initial compromise methods

* Awareness of:
+ Privilege escalation and lateral movement concepts
+ Attack paths across enterprise environments

* Interest in developing Red Team and offensive security capabilities over time.


**Qualifications**
* Bachelor's degree in Computer Science, Information Security, or a related field.
* Certifications such as OSCP, OSWA, CISSP or CompTIA are desired but not required.


**Job Category:**
 IT \- Technology Services
   

  

**Posting End Date:**
 30/12/2026

Penetration Testing Analyst

Experience Required: 6-8 years of experience within Cyber Security, Information Security, or Risk Management Experience working in consulting, enterprise, managed services, or corporate environments Strong understanding of cybersecurity frameworks, standards, and best practices Core Skills: Security Governance, Risk & Compliance (GRC) Vulnerability Assessments and Risk Analysis Security Audits and Gap Assessments Incident Response and Security Operations Identity & Access Management (IAM) Netwo…

Cyber Security Consultant

Programme Manager Networks and MessagingJob DescriptionOur client, a global technology firm, is seeking a Programme Manager (Networks and Messaging) to join their team in Sandton on a contractor basis. They offer stability, growth, attractive rates and a great working environment.Role OverviewThe Programme Manager Networks and Messaging will provide strategic leadership, governance and delivery oversight across a portfolio of enterprise network and messaging initiatives. The role will lead mode…

Senior Programme Manager (Networks and Messaging)

Johannesburg, South Africa | Posted on 08/26/2026 Reverside is an established IT services provider delivering Software Development , IT Resourcing, Digital Transformation, and SystemsSupport solutions. We are seeking a Cyber Security Engineer specialising inPenetration Testing to identify vulnerabilities across applications, APIs, andinternal systems. The role focuses on proactive security testing, riskidentification, and providing actionable remediation recommendations. Key Responsibilities Co…

Cyber Security Engineer (Pen Tester)

Senior Specialist – Cyber Security Assurance Johannesburg, South Africa | Posted on 08/28/2026 Reverside is an established it services provider focusing on delivering high-quality software development, it resourcing, digital transformation, and systems support solutions. We are always looking for skilled professionals to join our growing team and contribute to innovative technology projects across various industries. We are seeking a Senior Specialist – Cyber SecurityAssurance to take responsib…

Senior Specialist – Cyber Security Assurance

Johannesburg, South Africa Reverside is an established it services provider focusing on delivering high-quality software development, it resourcing, digital transformation, and systems support solutions. We are always looking for skilled professionals to join our growing team and contribute to innovative technology projects across various industries. We are seeking a Cyber Security Engineer specialising inPenetration Testing to identify vulnerabilities across applications, APIs, andinternal sys…

CYBER SECURITY SPECIALIST: DevSecOps, IT CYBER SECURITY Job Openings CYBER SECURITY SPECIALIST: DevSecOps, IT CYBER SECURITY About the job CYBER SECURITY SPECIALIST: DevSecOps, IT CYBER SECURITY Job Description Secure the development of products - integrate security practices as early as possible in the lifecycle of software development under the guiding principles of shift left and security by default. Prescribe, maintain and enhance cool toolsets manage the relevant tools required for mature …

CYBER SECURITY SPECIALIST: DevSecOps, IT CYBER SECURITY

About the Role Our client is seeking a vigilant and skilled Cyber Security Analyst to join their fully remote security team. This role is essential for monitoring, detecting, and responding to cyber threats to protect the organization's digital assets. You will analyze security events, investigate incidents, and implement measures to strengthen our defenses against an ever-evolving threat landscape. This is an excellent opportunity for a dedicated professional to contribute significantly to cyb…

Cyber Security Analyst

Cyber Security Specialist (Manufacturing) Location: Centurion, Pretoria, South Africa Salary: Market Related Our client in the manufacturing industry is looking for a Cyber Security Specialist to provide end-to-end security solutions for the monitoring, assessment and defense of client's information assets. Key responsibilities Seeking to build in security during the development stages of software systems, networks and data centres Looking for vulnerabilities and risks in hardware and software …

Cyber Security Specialist (Manufacturing)

In order to be considered the following is required 3–5 years of cyber security sales experience, this experience should be in IT services, consulting or cybersecurity Proven track record of meeting or exceeding sales targets Strong communication and negotiation skills, with confidence engaging C-level stakeholders Familiarity with cybersecurity concepts (penetration testing, risk assessments) Self‑motivated, organised, and comfortable working both independently and in a team Responsibilities C…

Account Manager (Cyber Security)

In order to be considered the following is required: 3–5 years of cyber security sales experience, this experience should be in IT services, consulting or cybersecurity Proven track record of meeting or exceeding sales targets Strong communication and negotiation skills, with confidence engaging C-level stakeholders Familiarity with cybersecurity concepts (penetration testing, risk assessments) Self-motivated, organised, and comfortable working both independently and in a team Responsibilities:…

About the Role Our client is seeking a motivated Cyber Security Analyst to join their Security Operations Center (SOC) team, operating remotely. This role is vital in continuously monitoring and defending the organization's network and systems against cyber threats. You will be responsible for detecting, analyzing, and responding to security incidents in real-time. The ideal candidate is vigilant, possesses strong analytical skills, and has a passion for cybersecurity. Working remotely, you wil…

Cyber Security Analyst - SOC

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Cyber Security Domain Architect based in South Africa. As a Cyber Security Domain Architect, you will shape enterprise security strategies across cloud, infrastructure, identity, and data environments. You will define current-state and target-state architectures while establishing standards, controls, reference architectures, and multi-year security roadmaps. The rol…

Cyber Security Domain Architect

The Principal Cyber Security Engineer reports to the Chief Network Operations Officer and is a senior member of the Network Engineering Team. In this role, the incumbent is expected to provide authoritative technical leadership in the design, implementation, operation, and continuous improvement of network security controls that protect the confidentiality, integrity, and availability of the South African National Research and Education Network (SANREN) and its underlying infrastructure. The po…

Principal Cyber Security Engineer

Lead Engineer (Cyber security) Our client is an AI security platform that acts as a security gateway between AI agents and databases. As companies increasingly allow AI agents to interact directly with systems and data, our client helps prevent sensitive data exposure, destructive queries, compliance violations and operational mistakes. The platform inspects and controls database interactions in real time through policy enforcement, threat detection and comprehensive audit logging. The product …

Lead Engineer (Cyber security)

Cybersecurity Specialist with Darktrace Expertise Our clients are seeking a highly skilled Cybersecurity Specialist with expertise in Darktrace to join their dynamic team. As a Cybersecurity Specialist, you will be responsible for designing, implementing, and managing cybersecurity solutions, with a focus on leveraging Darktrace technology to detect and respond to emerging threats. Your role will involve collaborating with internal teams to assess cybersecurity risks, develop strategies for thr…

Cyber Security Jobs in South Africa - Page 6

Vacancies (page 6 of 8)