Cyber Security Analyst

Job overview

The Cyber Security Analyst will safeguard the company’s networks, systems, and information from digital threats. The role focuses on spotting suspicious activity, finding weaknesses, handling incidents, and putting controls in place that improve the organization’s security resilience. This position reports to the IT Security Manager or Chief Information Security Officer (CISO) and is based in Zimbabwe.

Key responsibilities

• Keep constant watch over systems and networks to detect unauthorized access, breaches, or unusual activity.
• Review security warnings and event logs generated by tools such as firewalls, intrusion detection and prevention systems, and other monitoring platforms.
• Use threat intelligence sources and security tools to uncover possible vulnerabilities.
• Respond quickly to security incidents and work to contain and reduce any impact.
• Investigate incidents to determine how the breach occurred, how far it spread, and which systems were affected.
• Document incidents in detail and suggest corrective and preventive actions.
• Set up, refresh, and support security solutions such as SIEM platforms, antivirus software, and endpoint protection systems.
• Assist with the implementation and administration of firewalls, VPNs, and encryption tools.
• Help ensure that systems and processes meet required security standards and regulations.
• Carry out vulnerability assessments and penetration testing to identify weaknesses and support remediation.
• Work with IT teams to apply patches and updates that fix security gaps.
• Review the risk level of new technologies, systems, and external vendors before they are introduced.
• Create and enforce cybersecurity policies, standards, and best practices across the business.
• Support adherence to relevant frameworks and regulations, including GDPR, HIPAA, PCI DSS, and NIST.
• Recommend improvements that strengthen the overall security posture of the organization.
• Deliver security awareness training to employees to encourage safe online and system usage.
• Educate staff on threats such as phishing, password hygiene, and other cyber safety practices.

Qualifications and experience

The role requires a bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related discipline, along with 2 to 5 years of experience in cybersecurity or a similar IT position.

Technical and professional skills

Strong knowledge of networking concepts such as TCP/IP, DNS, and VPNs is needed, together with hands-on experience using security tools like firewalls, SIEM systems, and IDS/IPS. Scripting ability in Python or PowerShell is an advantage, as is familiarity with programming concepts. Exposure to cloud security environments such as AWS, Azure, or Google Cloud is also preferred.

Soft skills

Success in this role depends on strong analytical thinking, sound problem-solving ability, clear verbal and written communication, and the ability to stay composed during active security incidents.

Work environment

This is an office-based role with a possible hybrid arrangement and may involve on-call duties for incident response. The work includes handling highly confidential and sensitive information.

Additional information

The position offers the chance to work at the forefront of cybersecurity, helping protect the organization’s assets and adapt to evolving threats and technologies.

Preferred certifications

• Certified Information Systems Security Professional (CISSP)
• CompTIA Security+
• Certified Ethical Hacker (CEH)
• GIAC Security Essentials (GSEC)