235 Cybersecurity Risk jobs in South Africa

Overview

Current job opportunities are posted here as they become available.

Subscribe to our RSS feeds to receive instant updates as new positions become available.

Job Title: Technical Security Analyst
Reports To: Associate Director, Security
Employment Type: Full-Time, Permanent, remote position in South Africa only

As a Technical Security Analyst at Netstock, you will be at the frontline of defending our digital environment by identifying, analyzing, and responding to cyber threats with precision and context. You’ll leverage your expertise in forensic analysis, vulnerability assessment, and threat intelligence to investigate incidents, interpret complex server logs, and assess the true business impact of vulnerabilities. This role is ideal for a technically skilled professional who understands risk and thrives in high stakes scenarios.

You’ll work closely with cross-functional teams, including engineering, compliance, and IT to ensure that security incidents are swiftly contained, vulnerabilities are correctly prioritized, and risks are well-communicated. Your ability to see the bigger picture while navigating the technical details will directly strengthen our security posture.

From interpreting CVEs to leading incident reviews, your input will shape how we protect our infrastructure and our customers. If you’re passionate about forensics, threat response, and building resilient systems in a modern, cloud-based environment, we’d love to hear from you!

Responsible for conducting forensic evidence gathering during security incidents, interpreting system and application logs, and identifying indicators of compromise. This role requires a strong foundation in cybersecurity principles, familiarity with server environments, and hands-on experience with vulnerability and threat analysis.

• Collect and preserve forensic evidence from servers, endpoints, and cloud environments in a forensically sound manner
• Access, read, and interpret server logs, audit trails, and system data to support investigations
• Analyze logs for suspicious activity, privilege escalations, lateral movement, and known attack signatures
• Support segregation of duties analysis and remediation
• Analyze the technical and business impact of identified vulnerabilities or attack vectors using threat intelligence and risk management principles
• Evaluate the likelihood and potential consequence of exploitation, and provide context-based risk ratings and mitigation recommendations
• Collaborate with DevOps, Dev, IT and Security teams during incident response, ensuring proper containment and root cause analysis
• Maintain awareness of emerging vulnerabilities, actively working with CVEs and threat intelligence to assess risk
• Provide post-incident reporting with detailed timelines, evidence, and mitigation recommendations
• Ensure forensic/investigation activities align with legal, regulatory, and organizational standards (e.g., ISO 27001, NIST, GDPR)
• Vulnerability Management - Track patching and configuration compliance across systems
• Proactively search for signs of compromise using hypothesis-based techniques
• Use threat intelligence feeds and TTPs (Tactics, Techniques, and Procedures) to identify abnormal patterns
• Build and refine detection logic based on observed environment behavior
• Create custom log correlation rules and detection use cases
• Review server, database, and application configurations for security misconfigurations
• Assist with internal or third-party penetration testing exercises
• Validate reported vulnerabilities and test exploitability in controlled environments
• Help develop realistic tabletop scenarios and user training content

• Proficiency in forensic tools and techniques
• Generalist understanding of server infrastructure, system privileges, and core security concepts
• Ability to parse and correlate various log formats (syslog, Windows Event Logs, cloud audit logs, etc.)
• Proficient in reviewing and interpreting log data across different platforms (Windows, Linux, cloud, network appliances)
• Experience with CVE tracking, vulnerability scanners, and mitigation workflows
• Familiarity with standards such as ISO 27001 and common infosec frameworks
• Solid grasp of risk management principles (likelihood vs. impact, asset value, threat actor profiling, etc.)
• Experience assessing the business relevance of technical vulnerabilities and translating findings for stakeholders

• Hands-on incident response or blue team roles
• Exposure to SIEM platforms
• Understanding of chain-of-custody and legal considerations in evidence handling
• Experience in environments with regulatory requirements
• Familiarity with common services: SSH, DNS, HTTP(S), SMB, RDP
• IDS/IPS knowledge
• Ability to track vulnerabilities through to remediation
• Exposure to ISO 27001, NIST CSF, CIS Controls, MITRE ATT&CK
• Ability to perform hypothesis-driven hunts and pivot off findings
• Knowledge of cloud platforms: AWS, Linode, Hetzner
• Understanding of the CIA triad (Confidentiality, Integrity, Availability)

This position is subject to pre-employment screening, however candidates will not be unfairly discriminated against.

We receive a high number of applications per role and therefore ONLY successful applicants will be contacted.

This role is open to residents of the Republic of South Africa. Although we may consider candidates with permanent residency, preference will be given to citizens of the Republic of South Africa.

Netstock was founded with a clear vision: To give the hungry up-and-comers the capability to level the playing field and compete with the industry giants. Working here means embracing that “challenger” mentality: We are smart, scrappy fighters, building our edge with the agility to move faster than the big guys — pioneering smarter ways to work and innovating new ways to deliver powerfully easy to use technologies for our customers.

Netstock is the driving force accelerating the growth of organizations worldwide. Over the last 15 years, we’ve built out a regional presence that gives us deep insights into supply chain planning factors in each industry. We continue to enhance our supply chain planning solutions, making our predictive engine smarter, accelerating automation, and adding sophisticated new capabilities such as AI and machine learning.

You can read more about Netstock’s history and our product offering at Netstock

Overview

Current job opportunities are posted here as they become available.

Subscribe to our RSS feeds to receive instant updates as new positions become available.

Job Title: Technical Security Analyst
Reports To: Associate Director, Security
Employment Type: Full-Time, Permanent, remote position in South Africa only

As a Technical Security Analyst at Netstock, you will be at the frontline of defending our digital environment by identifying, analyzing, and responding to cyber threats with precision and context. You’ll leverage your expertise in forensic analysis, vulnerability assessment, and threat intelligence to investigate incidents, interpret complex server logs, and assess the true business impact of vulnerabilities. This role is ideal for a technically skilled professional who understands risk and thrives in high stakes scenarios.

You’ll work closely with cross-functional teams, including engineering, compliance, and IT to ensure that security incidents are swiftly contained, vulnerabilities are correctly prioritized, and risks are well-communicated. Your ability to see the bigger picture while navigating the technical details will directly strengthen our security posture.

From interpreting CVEs to leading incident reviews, your input will shape how we protect our infrastructure and our customers. If you’re passionate about forensics, threat response, and building resilient systems in a modern, cloud-based environment, we’d love to hear from you!

Responsible for conducting forensic evidence gathering during security incidents, interpreting system and application logs, and identifying indicators of compromise. This role requires a strong foundation in cybersecurity principles, familiarity with server environments, and hands-on experience with vulnerability and threat analysis.

• Collect and preserve forensic evidence from servers, endpoints, and cloud environments in a forensically sound manner
• Access, read, and interpret server logs, audit trails, and system data to support investigations
• Analyze logs for suspicious activity, privilege escalations, lateral movement, and known attack signatures
• Support segregation of duties analysis and remediation
• Analyze the technical and business impact of identified vulnerabilities or attack vectors using threat intelligence and risk management principles
• Evaluate the likelihood and potential consequence of exploitation, and provide context-based risk ratings and mitigation recommendations
• Collaborate with DevOps, Dev, IT and Security teams during incident response, ensuring proper containment and root cause analysis
• Maintain awareness of emerging vulnerabilities, actively working with CVEs and threat intelligence to assess risk
• Provide post-incident reporting with detailed timelines, evidence, and mitigation recommendations
• Ensure forensic/investigation activities align with legal, regulatory, and organizational standards (e.g., ISO 27001, NIST, GDPR)
• Vulnerability Management - Track patching and configuration compliance across systems
• Proactively search for signs of compromise using hypothesis-based techniques
• Use threat intelligence feeds and TTPs (Tactics, Techniques, and Procedures) to identify abnormal patterns
• Build and refine detection logic based on observed environment behavior
• Create custom log correlation rules and detection use cases
• Review server, database, and application configurations for security misconfigurations
• Assist with internal or third-party penetration testing exercises
• Validate reported vulnerabilities and test exploitability in controlled environments
• Help develop realistic tabletop scenarios and user training content

• Proficiency in forensic tools and techniques
• Generalist understanding of server infrastructure, system privileges, and core security concepts
• Ability to parse and correlate various log formats (syslog, Windows Event Logs, cloud audit logs, etc.)
• Proficient in reviewing and interpreting log data across different platforms (Windows, Linux, cloud, network appliances)
• Experience with CVE tracking, vulnerability scanners, and mitigation workflows
• Familiarity with standards such as ISO 27001 and common infosec frameworks
• Solid grasp of risk management principles (likelihood vs. impact, asset value, threat actor profiling, etc.)
• Experience assessing the business relevance of technical vulnerabilities and translating findings for stakeholders

• Hands-on incident response or blue team roles
• Exposure to SIEM platforms
• Understanding of chain-of-custody and legal considerations in evidence handling
• Experience in environments with regulatory requirements
• Familiarity with common services: SSH, DNS, HTTP(S), SMB, RDP
• IDS/IPS knowledge
• Ability to track vulnerabilities through to remediation
• Exposure to ISO 27001, NIST CSF, CIS Controls, MITRE ATT&CK
• Ability to perform hypothesis-driven hunts and pivot off findings
• Knowledge of cloud platforms: AWS, Linode, Hetzner
• Understanding of the CIA triad (Confidentiality, Integrity, Availability)

This position is subject to pre-employment screening, however candidates will not be unfairly discriminated against.

We receive a high number of applications per role and therefore ONLY successful applicants will be contacted.

This role is open to residents of the Republic of South Africa. Although we may consider candidates with permanent residency, preference will be given to citizens of the Republic of South Africa.

Netstock was founded with a clear vision: To give the hungry up-and-comers the capability to level the playing field and compete with the industry giants. Working here means embracing that “challenger” mentality: We are smart, scrappy fighters, building our edge with the agility to move faster than the big guys — pioneering smarter ways to work and innovating new ways to deliver powerfully easy to use technologies for our customers.

Netstock is the driving force accelerating the growth of organizations worldwide. Over the last 15 years, we’ve built out a regional presence that gives us deep insights into supply chain planning factors in each industry. We continue to enhance our supply chain planning solutions, making our predictive engine smarter, accelerating automation, and adding sophisticated new capabilities such as AI and machine learning.

You can read more about Netstock’s history and our product offering at Netstock

Overview

Current job opportunities are posted here as they become available.

Subscribe to our RSS feeds to receive instant updates as new positions become available.

Job Title: Technical Security Analyst
Reports To: Associate Director, Security
Employment Type: Full-Time, Permanent, remote position in South Africa only

As a Technical Security Analyst at Netstock, you will be at the frontline of defending our digital environment by identifying, analyzing, and responding to cyber threats with precision and context. You’ll leverage your expertise in forensic analysis, vulnerability assessment, and threat intelligence to investigate incidents, interpret complex server logs, and assess the true business impact of vulnerabilities. This role is ideal for a technically skilled professional who understands risk and thrives in high stakes scenarios.

You’ll work closely with cross-functional teams, including engineering, compliance, and IT to ensure that security incidents are swiftly contained, vulnerabilities are correctly prioritized, and risks are well-communicated. Your ability to see the bigger picture while navigating the technical details will directly strengthen our security posture.

From interpreting CVEs to leading incident reviews, your input will shape how we protect our infrastructure and our customers. If you’re passionate about forensics, threat response, and building resilient systems in a modern, cloud-based environment, we’d love to hear from you!

Responsible for conducting forensic evidence gathering during security incidents, interpreting system and application logs, and identifying indicators of compromise. This role requires a strong foundation in cybersecurity principles, familiarity with server environments, and hands-on experience with vulnerability and threat analysis.

• Collect and preserve forensic evidence from servers, endpoints, and cloud environments in a forensically sound manner
• Access, read, and interpret server logs, audit trails, and system data to support investigations
• Analyze logs for suspicious activity, privilege escalations, lateral movement, and known attack signatures
• Support segregation of duties analysis and remediation
• Analyze the technical and business impact of identified vulnerabilities or attack vectors using threat intelligence and risk management principles
• Evaluate the likelihood and potential consequence of exploitation, and provide context-based risk ratings and mitigation recommendations
• Collaborate with DevOps, Dev, IT and Security teams during incident response, ensuring proper containment and root cause analysis
• Maintain awareness of emerging vulnerabilities, actively working with CVEs and threat intelligence to assess risk
• Provide post-incident reporting with detailed timelines, evidence, and mitigation recommendations
• Ensure forensic/investigation activities align with legal, regulatory, and organizational standards (e.g., ISO 27001, NIST, GDPR)
• Vulnerability Management - Track patching and configuration compliance across systems
• Proactively search for signs of compromise using hypothesis-based techniques
• Use threat intelligence feeds and TTPs (Tactics, Techniques, and Procedures) to identify abnormal patterns
• Build and refine detection logic based on observed environment behavior
• Create custom log correlation rules and detection use cases
• Review server, database, and application configurations for security misconfigurations
• Assist with internal or third-party penetration testing exercises
• Validate reported vulnerabilities and test exploitability in controlled environments
• Help develop realistic tabletop scenarios and user training content

• Proficiency in forensic tools and techniques
• Generalist understanding of server infrastructure, system privileges, and core security concepts
• Ability to parse and correlate various log formats (syslog, Windows Event Logs, cloud audit logs, etc.)
• Proficient in reviewing and interpreting log data across different platforms (Windows, Linux, cloud, network appliances)
• Experience with CVE tracking, vulnerability scanners, and mitigation workflows
• Familiarity with standards such as ISO 27001 and common infosec frameworks
• Solid grasp of risk management principles (likelihood vs. impact, asset value, threat actor profiling, etc.)
• Experience assessing the business relevance of technical vulnerabilities and translating findings for stakeholders

• Hands-on incident response or blue team roles
• Exposure to SIEM platforms
• Understanding of chain-of-custody and legal considerations in evidence handling
• Experience in environments with regulatory requirements
• Familiarity with common services: SSH, DNS, HTTP(S), SMB, RDP
• IDS/IPS knowledge
• Ability to track vulnerabilities through to remediation
• Exposure to ISO 27001, NIST CSF, CIS Controls, MITRE ATT&CK
• Ability to perform hypothesis-driven hunts and pivot off findings
• Knowledge of cloud platforms: AWS, Linode, Hetzner
• Understanding of the CIA triad (Confidentiality, Integrity, Availability)

This position is subject to pre-employment screening, however candidates will not be unfairly discriminated against.

We receive a high number of applications per role and therefore ONLY successful applicants will be contacted.

This role is open to residents of the Republic of South Africa. Although we may consider candidates with permanent residency, preference will be given to citizens of the Republic of South Africa.

Netstock was founded with a clear vision: To give the hungry up-and-comers the capability to level the playing field and compete with the industry giants. Working here means embracing that “challenger” mentality: We are smart, scrappy fighters, building our edge with the agility to move faster than the big guys — pioneering smarter ways to work and innovating new ways to deliver powerfully easy to use technologies for our customers.

Netstock is the driving force accelerating the growth of organizations worldwide. Over the last 15 years, we’ve built out a regional presence that gives us deep insights into supply chain planning factors in each industry. We continue to enhance our supply chain planning solutions, making our predictive engine smarter, accelerating automation, and adding sophisticated new capabilities such as AI and machine learning.

You can read more about Netstock’s history and our product offering at Netstock

Overview

Current job opportunities are posted here as they become available.

Subscribe to our RSS feeds to receive instant updates as new positions become available.

Job Title: Technical Security Analyst
Reports To: Associate Director, Security
Employment Type: Full-Time, Permanent, remote position in South Africa only

As a Technical Security Analyst at Netstock, you will be at the frontline of defending our digital environment by identifying, analyzing, and responding to cyber threats with precision and context. You’ll leverage your expertise in forensic analysis, vulnerability assessment, and threat intelligence to investigate incidents, interpret complex server logs, and assess the true business impact of vulnerabilities. This role is ideal for a technically skilled professional who understands risk and thrives in high stakes scenarios.

You’ll work closely with cross-functional teams, including engineering, compliance, and IT to ensure that security incidents are swiftly contained, vulnerabilities are correctly prioritized, and risks are well-communicated. Your ability to see the bigger picture while navigating the technical details will directly strengthen our security posture.

From interpreting CVEs to leading incident reviews, your input will shape how we protect our infrastructure and our customers. If you’re passionate about forensics, threat response, and building resilient systems in a modern, cloud-based environment, we’d love to hear from you!

Responsible for conducting forensic evidence gathering during security incidents, interpreting system and application logs, and identifying indicators of compromise. This role requires a strong foundation in cybersecurity principles, familiarity with server environments, and hands-on experience with vulnerability and threat analysis.

• Collect and preserve forensic evidence from servers, endpoints, and cloud environments in a forensically sound manner
• Access, read, and interpret server logs, audit trails, and system data to support investigations
• Analyze logs for suspicious activity, privilege escalations, lateral movement, and known attack signatures
• Support segregation of duties analysis and remediation
• Analyze the technical and business impact of identified vulnerabilities or attack vectors using threat intelligence and risk management principles
• Evaluate the likelihood and potential consequence of exploitation, and provide context-based risk ratings and mitigation recommendations
• Collaborate with DevOps, Dev, IT and Security teams during incident response, ensuring proper containment and root cause analysis
• Maintain awareness of emerging vulnerabilities, actively working with CVEs and threat intelligence to assess risk
• Provide post-incident reporting with detailed timelines, evidence, and mitigation recommendations
• Ensure forensic/investigation activities align with legal, regulatory, and organizational standards (e.g., ISO 27001, NIST, GDPR)
• Vulnerability Management - Track patching and configuration compliance across systems
• Proactively search for signs of compromise using hypothesis-based techniques
• Use threat intelligence feeds and TTPs (Tactics, Techniques, and Procedures) to identify abnormal patterns
• Build and refine detection logic based on observed environment behavior
• Create custom log correlation rules and detection use cases
• Review server, database, and application configurations for security misconfigurations
• Assist with internal or third-party penetration testing exercises
• Validate reported vulnerabilities and test exploitability in controlled environments
• Help develop realistic tabletop scenarios and user training content

• Proficiency in forensic tools and techniques
• Generalist understanding of server infrastructure, system privileges, and core security concepts
• Ability to parse and correlate various log formats (syslog, Windows Event Logs, cloud audit logs, etc.)
• Proficient in reviewing and interpreting log data across different platforms (Windows, Linux, cloud, network appliances)
• Experience with CVE tracking, vulnerability scanners, and mitigation workflows
• Familiarity with standards such as ISO 27001 and common infosec frameworks
• Solid grasp of risk management principles (likelihood vs. impact, asset value, threat actor profiling, etc.)
• Experience assessing the business relevance of technical vulnerabilities and translating findings for stakeholders

• Hands-on incident response or blue team roles
• Exposure to SIEM platforms
• Understanding of chain-of-custody and legal considerations in evidence handling
• Experience in environments with regulatory requirements
• Familiarity with common services: SSH, DNS, HTTP(S), SMB, RDP
• IDS/IPS knowledge
• Ability to track vulnerabilities through to remediation
• Exposure to ISO 27001, NIST CSF, CIS Controls, MITRE ATT&CK
• Ability to perform hypothesis-driven hunts and pivot off findings
• Knowledge of cloud platforms: AWS, Linode, Hetzner
• Understanding of the CIA triad (Confidentiality, Integrity, Availability)

This position is subject to pre-employment screening, however candidates will not be unfairly discriminated against.

We receive a high number of applications per role and therefore ONLY successful applicants will be contacted.

This role is open to residents of the Republic of South Africa. Although we may consider candidates with permanent residency, preference will be given to citizens of the Republic of South Africa.

Netstock was founded with a clear vision: To give the hungry up-and-comers the capability to level the playing field and compete with the industry giants. Working here means embracing that “challenger” mentality: We are smart, scrappy fighters, building our edge with the agility to move faster than the big guys — pioneering smarter ways to work and innovating new ways to deliver powerfully easy to use technologies for our customers.

Netstock is the driving force accelerating the growth of organizations worldwide. Over the last 15 years, we’ve built out a regional presence that gives us deep insights into supply chain planning factors in each industry. We continue to enhance our supply chain planning solutions, making our predictive engine smarter, accelerating automation, and adding sophisticated new capabilities such as AI and machine learning.

You can read more about Netstock’s history and our product offering at Netstock

Overview

Current job opportunities are posted here as they become available.

Subscribe to our RSS feeds to receive instant updates as new positions become available.

Job Title: Technical Security Analyst
Reports To: Associate Director, Security
Employment Type: Full-Time, Permanent, remote position in South Africa only

As a Technical Security Analyst at Netstock, you will be at the frontline of defending our digital environment by identifying, analyzing, and responding to cyber threats with precision and context. You’ll leverage your expertise in forensic analysis, vulnerability assessment, and threat intelligence to investigate incidents, interpret complex server logs, and assess the true business impact of vulnerabilities. This role is ideal for a technically skilled professional who understands risk and thrives in high stakes scenarios.

You’ll work closely with cross-functional teams, including engineering, compliance, and IT to ensure that security incidents are swiftly contained, vulnerabilities are correctly prioritized, and risks are well-communicated. Your ability to see the bigger picture while navigating the technical details will directly strengthen our security posture.

From interpreting CVEs to leading incident reviews, your input will shape how we protect our infrastructure and our customers. If you’re passionate about forensics, threat response, and building resilient systems in a modern, cloud-based environment, we’d love to hear from you!

Responsible for conducting forensic evidence gathering during security incidents, interpreting system and application logs, and identifying indicators of compromise. This role requires a strong foundation in cybersecurity principles, familiarity with server environments, and hands-on experience with vulnerability and threat analysis.

• Collect and preserve forensic evidence from servers, endpoints, and cloud environments in a forensically sound manner
• Access, read, and interpret server logs, audit trails, and system data to support investigations
• Analyze logs for suspicious activity, privilege escalations, lateral movement, and known attack signatures
• Support segregation of duties analysis and remediation
• Analyze the technical and business impact of identified vulnerabilities or attack vectors using threat intelligence and risk management principles
• Evaluate the likelihood and potential consequence of exploitation, and provide context-based risk ratings and mitigation recommendations
• Collaborate with DevOps, Dev, IT and Security teams during incident response, ensuring proper containment and root cause analysis
• Maintain awareness of emerging vulnerabilities, actively working with CVEs and threat intelligence to assess risk
• Provide post-incident reporting with detailed timelines, evidence, and mitigation recommendations
• Ensure forensic/investigation activities align with legal, regulatory, and organizational standards (e.g., ISO 27001, NIST, GDPR)
• Vulnerability Management - Track patching and configuration compliance across systems
• Proactively search for signs of compromise using hypothesis-based techniques
• Use threat intelligence feeds and TTPs (Tactics, Techniques, and Procedures) to identify abnormal patterns
• Build and refine detection logic based on observed environment behavior
• Create custom log correlation rules and detection use cases
• Review server, database, and application configurations for security misconfigurations
• Assist with internal or third-party penetration testing exercises
• Validate reported vulnerabilities and test exploitability in controlled environments
• Help develop realistic tabletop scenarios and user training content

• Proficiency in forensic tools and techniques
• Generalist understanding of server infrastructure, system privileges, and core security concepts
• Ability to parse and correlate various log formats (syslog, Windows Event Logs, cloud audit logs, etc.)
• Proficient in reviewing and interpreting log data across different platforms (Windows, Linux, cloud, network appliances)
• Experience with CVE tracking, vulnerability scanners, and mitigation workflows
• Familiarity with standards such as ISO 27001 and common infosec frameworks
• Solid grasp of risk management principles (likelihood vs. impact, asset value, threat actor profiling, etc.)
• Experience assessing the business relevance of technical vulnerabilities and translating findings for stakeholders

• Hands-on incident response or blue team roles
• Exposure to SIEM platforms
• Understanding of chain-of-custody and legal considerations in evidence handling
• Experience in environments with regulatory requirements
• Familiarity with common services: SSH, DNS, HTTP(S), SMB, RDP
• IDS/IPS knowledge
• Ability to track vulnerabilities through to remediation
• Exposure to ISO 27001, NIST CSF, CIS Controls, MITRE ATT&CK
• Ability to perform hypothesis-driven hunts and pivot off findings
• Knowledge of cloud platforms: AWS, Linode, Hetzner
• Understanding of the CIA triad (Confidentiality, Integrity, Availability)

This position is subject to pre-employment screening, however candidates will not be unfairly discriminated against.

We receive a high number of applications per role and therefore ONLY successful applicants will be contacted.

This role is open to residents of the Republic of South Africa. Although we may consider candidates with permanent residency, preference will be given to citizens of the Republic of South Africa.

Netstock was founded with a clear vision: To give the hungry up-and-comers the capability to level the playing field and compete with the industry giants. Working here means embracing that “challenger” mentality: We are smart, scrappy fighters, building our edge with the agility to move faster than the big guys — pioneering smarter ways to work and innovating new ways to deliver powerfully easy to use technologies for our customers.

Netstock is the driving force accelerating the growth of organizations worldwide. Over the last 15 years, we’ve built out a regional presence that gives us deep insights into supply chain planning factors in each industry. We continue to enhance our supply chain planning solutions, making our predictive engine smarter, accelerating automation, and adding sophisticated new capabilities such as AI and machine learning.

You can read more about Netstock’s history and our product offering at Netstock

Overview

Current job opportunities are posted here as they become available.

Subscribe to our RSS feeds to receive instant updates as new positions become available.

Job Title: Technical Security Analyst
Reports To: Associate Director, Security
Employment Type: Full-Time, Permanent, remote position in South Africa only

As a Technical Security Analyst at Netstock, you will be at the frontline of defending our digital environment by identifying, analyzing, and responding to cyber threats with precision and context. You’ll leverage your expertise in forensic analysis, vulnerability assessment, and threat intelligence to investigate incidents, interpret complex server logs, and assess the true business impact of vulnerabilities. This role is ideal for a technically skilled professional who understands risk and thrives in high stakes scenarios.

You’ll work closely with cross-functional teams, including engineering, compliance, and IT to ensure that security incidents are swiftly contained, vulnerabilities are correctly prioritized, and risks are well-communicated. Your ability to see the bigger picture while navigating the technical details will directly strengthen our security posture.

From interpreting CVEs to leading incident reviews, your input will shape how we protect our infrastructure and our customers. If you’re passionate about forensics, threat response, and building resilient systems in a modern, cloud-based environment, we’d love to hear from you!

Responsible for conducting forensic evidence gathering during security incidents, interpreting system and application logs, and identifying indicators of compromise. This role requires a strong foundation in cybersecurity principles, familiarity with server environments, and hands-on experience with vulnerability and threat analysis.

• Collect and preserve forensic evidence from servers, endpoints, and cloud environments in a forensically sound manner
• Access, read, and interpret server logs, audit trails, and system data to support investigations
• Analyze logs for suspicious activity, privilege escalations, lateral movement, and known attack signatures
• Support segregation of duties analysis and remediation
• Analyze the technical and business impact of identified vulnerabilities or attack vectors using threat intelligence and risk management principles
• Evaluate the likelihood and potential consequence of exploitation, and provide context-based risk ratings and mitigation recommendations
• Collaborate with DevOps, Dev, IT and Security teams during incident response, ensuring proper containment and root cause analysis
• Maintain awareness of emerging vulnerabilities, actively working with CVEs and threat intelligence to assess risk
• Provide post-incident reporting with detailed timelines, evidence, and mitigation recommendations
• Ensure forensic/investigation activities align with legal, regulatory, and organizational standards (e.g., ISO 27001, NIST, GDPR)
• Vulnerability Management - Track patching and configuration compliance across systems
• Proactively search for signs of compromise using hypothesis-based techniques
• Use threat intelligence feeds and TTPs (Tactics, Techniques, and Procedures) to identify abnormal patterns
• Build and refine detection logic based on observed environment behavior
• Create custom log correlation rules and detection use cases
• Review server, database, and application configurations for security misconfigurations
• Assist with internal or third-party penetration testing exercises
• Validate reported vulnerabilities and test exploitability in controlled environments
• Help develop realistic tabletop scenarios and user training content

• Proficiency in forensic tools and techniques
• Generalist understanding of server infrastructure, system privileges, and core security concepts
• Ability to parse and correlate various log formats (syslog, Windows Event Logs, cloud audit logs, etc.)
• Proficient in reviewing and interpreting log data across different platforms (Windows, Linux, cloud, network appliances)
• Experience with CVE tracking, vulnerability scanners, and mitigation workflows
• Familiarity with standards such as ISO 27001 and common infosec frameworks
• Solid grasp of risk management principles (likelihood vs. impact, asset value, threat actor profiling, etc.)
• Experience assessing the business relevance of technical vulnerabilities and translating findings for stakeholders

• Hands-on incident response or blue team roles
• Exposure to SIEM platforms
• Understanding of chain-of-custody and legal considerations in evidence handling
• Experience in environments with regulatory requirements
• Familiarity with common services: SSH, DNS, HTTP(S), SMB, RDP
• IDS/IPS knowledge
• Ability to track vulnerabilities through to remediation
• Exposure to ISO 27001, NIST CSF, CIS Controls, MITRE ATT&CK
• Ability to perform hypothesis-driven hunts and pivot off findings
• Knowledge of cloud platforms: AWS, Linode, Hetzner
• Understanding of the CIA triad (Confidentiality, Integrity, Availability)

This position is subject to pre-employment screening, however candidates will not be unfairly discriminated against.

We receive a high number of applications per role and therefore ONLY successful applicants will be contacted.

This role is open to residents of the Republic of South Africa. Although we may consider candidates with permanent residency, preference will be given to citizens of the Republic of South Africa.

Netstock was founded with a clear vision: To give the hungry up-and-comers the capability to level the playing field and compete with the industry giants. Working here means embracing that “challenger” mentality: We are smart, scrappy fighters, building our edge with the agility to move faster than the big guys — pioneering smarter ways to work and innovating new ways to deliver powerfully easy to use technologies for our customers.

Netstock is the driving force accelerating the growth of organizations worldwide. Over the last 15 years, we’ve built out a regional presence that gives us deep insights into supply chain planning factors in each industry. We continue to enhance our supply chain planning solutions, making our predictive engine smarter, accelerating automation, and adding sophisticated new capabilities such as AI and machine learning.

You can read more about Netstock’s history and our product offering at Netstock

Overview

Current job opportunities are posted here as they become available.

Subscribe to our RSS feeds to receive instant updates as new positions become available.

Job Title: Technical Security Analyst
Reports To: Associate Director, Security
Employment Type: Full-Time, Permanent, remote position in South Africa only

As a Technical Security Analyst at Netstock, you will be at the frontline of defending our digital environment by identifying, analyzing, and responding to cyber threats with precision and context. You’ll leverage your expertise in forensic analysis, vulnerability assessment, and threat intelligence to investigate incidents, interpret complex server logs, and assess the true business impact of vulnerabilities. This role is ideal for a technically skilled professional who understands risk and thrives in high stakes scenarios.

You’ll work closely with cross-functional teams, including engineering, compliance, and IT to ensure that security incidents are swiftly contained, vulnerabilities are correctly prioritized, and risks are well-communicated. Your ability to see the bigger picture while navigating the technical details will directly strengthen our security posture.

From interpreting CVEs to leading incident reviews, your input will shape how we protect our infrastructure and our customers. If you’re passionate about forensics, threat response, and building resilient systems in a modern, cloud-based environment, we’d love to hear from you!

Responsible for conducting forensic evidence gathering during security incidents, interpreting system and application logs, and identifying indicators of compromise. This role requires a strong foundation in cybersecurity principles, familiarity with server environments, and hands-on experience with vulnerability and threat analysis.

• Collect and preserve forensic evidence from servers, endpoints, and cloud environments in a forensically sound manner
• Access, read, and interpret server logs, audit trails, and system data to support investigations
• Analyze logs for suspicious activity, privilege escalations, lateral movement, and known attack signatures
• Support segregation of duties analysis and remediation
• Analyze the technical and business impact of identified vulnerabilities or attack vectors using threat intelligence and risk management principles
• Evaluate the likelihood and potential consequence of exploitation, and provide context-based risk ratings and mitigation recommendations
• Collaborate with DevOps, Dev, IT and Security teams during incident response, ensuring proper containment and root cause analysis
• Maintain awareness of emerging vulnerabilities, actively working with CVEs and threat intelligence to assess risk
• Provide post-incident reporting with detailed timelines, evidence, and mitigation recommendations
• Ensure forensic/investigation activities align with legal, regulatory, and organizational standards (e.g., ISO 27001, NIST, GDPR)
• Vulnerability Management - Track patching and configuration compliance across systems
• Proactively search for signs of compromise using hypothesis-based techniques
• Use threat intelligence feeds and TTPs (Tactics, Techniques, and Procedures) to identify abnormal patterns
• Build and refine detection logic based on observed environment behavior
• Create custom log correlation rules and detection use cases
• Review server, database, and application configurations for security misconfigurations
• Assist with internal or third-party penetration testing exercises
• Validate reported vulnerabilities and test exploitability in controlled environments
• Help develop realistic tabletop scenarios and user training content

• Proficiency in forensic tools and techniques
• Generalist understanding of server infrastructure, system privileges, and core security concepts
• Ability to parse and correlate various log formats (syslog, Windows Event Logs, cloud audit logs, etc.)
• Proficient in reviewing and interpreting log data across different platforms (Windows, Linux, cloud, network appliances)
• Experience with CVE tracking, vulnerability scanners, and mitigation workflows
• Familiarity with standards such as ISO 27001 and common infosec frameworks
• Solid grasp of risk management principles (likelihood vs. impact, asset value, threat actor profiling, etc.)
• Experience assessing the business relevance of technical vulnerabilities and translating findings for stakeholders

• Hands-on incident response or blue team roles
• Exposure to SIEM platforms
• Understanding of chain-of-custody and legal considerations in evidence handling
• Experience in environments with regulatory requirements
• Familiarity with common services: SSH, DNS, HTTP(S), SMB, RDP
• IDS/IPS knowledge
• Ability to track vulnerabilities through to remediation
• Exposure to ISO 27001, NIST CSF, CIS Controls, MITRE ATT&CK
• Ability to perform hypothesis-driven hunts and pivot off findings
• Knowledge of cloud platforms: AWS, Linode, Hetzner
• Understanding of the CIA triad (Confidentiality, Integrity, Availability)

This position is subject to pre-employment screening, however candidates will not be unfairly discriminated against.

We receive a high number of applications per role and therefore ONLY successful applicants will be contacted.

This role is open to residents of the Republic of South Africa. Although we may consider candidates with permanent residency, preference will be given to citizens of the Republic of South Africa.

Netstock was founded with a clear vision: To give the hungry up-and-comers the capability to level the playing field and compete with the industry giants. Working here means embracing that “challenger” mentality: We are smart, scrappy fighters, building our edge with the agility to move faster than the big guys — pioneering smarter ways to work and innovating new ways to deliver powerfully easy to use technologies for our customers.

Netstock is the driving force accelerating the growth of organizations worldwide. Over the last 15 years, we’ve built out a regional presence that gives us deep insights into supply chain planning factors in each industry. We continue to enhance our supply chain planning solutions, making our predictive engine smarter, accelerating automation, and adding sophisticated new capabilities such as AI and machine learning.

You can read more about Netstock’s history and our product offering at Netstock

Overview

Current job opportunities are posted here as they become available.

Subscribe to our RSS feeds to receive instant updates as new positions become available.

Job Title: Technical Security Analyst
Reports To: Associate Director, Security
Employment Type: Full-Time, Permanent, remote position in South Africa only

As a Technical Security Analyst at Netstock, you will be at the frontline of defending our digital environment by identifying, analyzing, and responding to cyber threats with precision and context. You’ll leverage your expertise in forensic analysis, vulnerability assessment, and threat intelligence to investigate incidents, interpret complex server logs, and assess the true business impact of vulnerabilities. This role is ideal for a technically skilled professional who understands risk and thrives in high stakes scenarios.

You’ll work closely with cross-functional teams, including engineering, compliance, and IT to ensure that security incidents are swiftly contained, vulnerabilities are correctly prioritized, and risks are well-communicated. Your ability to see the bigger picture while navigating the technical details will directly strengthen our security posture.

From interpreting CVEs to leading incident reviews, your input will shape how we protect our infrastructure and our customers. If you’re passionate about forensics, threat response, and building resilient systems in a modern, cloud-based environment, we’d love to hear from you!

Responsible for conducting forensic evidence gathering during security incidents, interpreting system and application logs, and identifying indicators of compromise. This role requires a strong foundation in cybersecurity principles, familiarity with server environments, and hands-on experience with vulnerability and threat analysis.

• Collect and preserve forensic evidence from servers, endpoints, and cloud environments in a forensically sound manner
• Access, read, and interpret server logs, audit trails, and system data to support investigations
• Analyze logs for suspicious activity, privilege escalations, lateral movement, and known attack signatures
• Support segregation of duties analysis and remediation
• Analyze the technical and business impact of identified vulnerabilities or attack vectors using threat intelligence and risk management principles
• Evaluate the likelihood and potential consequence of exploitation, and provide context-based risk ratings and mitigation recommendations
• Collaborate with DevOps, Dev, IT and Security teams during incident response, ensuring proper containment and root cause analysis
• Maintain awareness of emerging vulnerabilities, actively working with CVEs and threat intelligence to assess risk
• Provide post-incident reporting with detailed timelines, evidence, and mitigation recommendations
• Ensure forensic/investigation activities align with legal, regulatory, and organizational standards (e.g., ISO 27001, NIST, GDPR)
• Vulnerability Management - Track patching and configuration compliance across systems
• Proactively search for signs of compromise using hypothesis-based techniques
• Use threat intelligence feeds and TTPs (Tactics, Techniques, and Procedures) to identify abnormal patterns
• Build and refine detection logic based on observed environment behavior
• Create custom log correlation rules and detection use cases
• Review server, database, and application configurations for security misconfigurations
• Assist with internal or third-party penetration testing exercises
• Validate reported vulnerabilities and test exploitability in controlled environments
• Help develop realistic tabletop scenarios and user training content

• Proficiency in forensic tools and techniques
• Generalist understanding of server infrastructure, system privileges, and core security concepts
• Ability to parse and correlate various log formats (syslog, Windows Event Logs, cloud audit logs, etc.)
• Proficient in reviewing and interpreting log data across different platforms (Windows, Linux, cloud, network appliances)
• Experience with CVE tracking, vulnerability scanners, and mitigation workflows
• Familiarity with standards such as ISO 27001 and common infosec frameworks
• Solid grasp of risk management principles (likelihood vs. impact, asset value, threat actor profiling, etc.)
• Experience assessing the business relevance of technical vulnerabilities and translating findings for stakeholders

• Hands-on incident response or blue team roles
• Exposure to SIEM platforms
• Understanding of chain-of-custody and legal considerations in evidence handling
• Experience in environments with regulatory requirements
• Familiarity with common services: SSH, DNS, HTTP(S), SMB, RDP
• IDS/IPS knowledge
• Ability to track vulnerabilities through to remediation
• Exposure to ISO 27001, NIST CSF, CIS Controls, MITRE ATT&CK
• Ability to perform hypothesis-driven hunts and pivot off findings
• Knowledge of cloud platforms: AWS, Linode, Hetzner
• Understanding of the CIA triad (Confidentiality, Integrity, Availability)

This position is subject to pre-employment screening, however candidates will not be unfairly discriminated against.

We receive a high number of applications per role and therefore ONLY successful applicants will be contacted.

This role is open to residents of the Republic of South Africa. Although we may consider candidates with permanent residency, preference will be given to citizens of the Republic of South Africa.

Netstock was founded with a clear vision: To give the hungry up-and-comers the capability to level the playing field and compete with the industry giants. Working here means embracing that “challenger” mentality: We are smart, scrappy fighters, building our edge with the agility to move faster than the big guys — pioneering smarter ways to work and innovating new ways to deliver powerfully easy to use technologies for our customers.

Netstock is the driving force accelerating the growth of organizations worldwide. Over the last 15 years, we’ve built out a regional presence that gives us deep insights into supply chain planning factors in each industry. We continue to enhance our supply chain planning solutions, making our predictive engine smarter, accelerating automation, and adding sophisticated new capabilities such as AI and machine learning.

You can read more about Netstock’s history and our product offering at Netstock

Overview

Current job opportunities are posted here as they become available.

Subscribe to our RSS feeds to receive instant updates as new positions become available.

Job Title: Technical Security Analyst
Reports To: Associate Director, Security
Employment Type: Full-Time, Permanent, remote position in South Africa only

As a Technical Security Analyst at Netstock, you will be at the frontline of defending our digital environment by identifying, analyzing, and responding to cyber threats with precision and context. You’ll leverage your expertise in forensic analysis, vulnerability assessment, and threat intelligence to investigate incidents, interpret complex server logs, and assess the true business impact of vulnerabilities. This role is ideal for a technically skilled professional who understands risk and thrives in high stakes scenarios.

You’ll work closely with cross-functional teams, including engineering, compliance, and IT to ensure that security incidents are swiftly contained, vulnerabilities are correctly prioritized, and risks are well-communicated. Your ability to see the bigger picture while navigating the technical details will directly strengthen our security posture.

From interpreting CVEs to leading incident reviews, your input will shape how we protect our infrastructure and our customers. If you’re passionate about forensics, threat response, and building resilient systems in a modern, cloud-based environment, we’d love to hear from you!

Responsible for conducting forensic evidence gathering during security incidents, interpreting system and application logs, and identifying indicators of compromise. This role requires a strong foundation in cybersecurity principles, familiarity with server environments, and hands-on experience with vulnerability and threat analysis.

• Collect and preserve forensic evidence from servers, endpoints, and cloud environments in a forensically sound manner
• Access, read, and interpret server logs, audit trails, and system data to support investigations
• Analyze logs for suspicious activity, privilege escalations, lateral movement, and known attack signatures
• Support segregation of duties analysis and remediation
• Analyze the technical and business impact of identified vulnerabilities or attack vectors using threat intelligence and risk management principles
• Evaluate the likelihood and potential consequence of exploitation, and provide context-based risk ratings and mitigation recommendations
• Collaborate with DevOps, Dev, IT and Security teams during incident response, ensuring proper containment and root cause analysis
• Maintain awareness of emerging vulnerabilities, actively working with CVEs and threat intelligence to assess risk
• Provide post-incident reporting with detailed timelines, evidence, and mitigation recommendations
• Ensure forensic/investigation activities align with legal, regulatory, and organizational standards (e.g., ISO 27001, NIST, GDPR)
• Vulnerability Management - Track patching and configuration compliance across systems
• Proactively search for signs of compromise using hypothesis-based techniques
• Use threat intelligence feeds and TTPs (Tactics, Techniques, and Procedures) to identify abnormal patterns
• Build and refine detection logic based on observed environment behavior
• Create custom log correlation rules and detection use cases
• Review server, database, and application configurations for security misconfigurations
• Assist with internal or third-party penetration testing exercises
• Validate reported vulnerabilities and test exploitability in controlled environments
• Help develop realistic tabletop scenarios and user training content

• Proficiency in forensic tools and techniques
• Generalist understanding of server infrastructure, system privileges, and core security concepts
• Ability to parse and correlate various log formats (syslog, Windows Event Logs, cloud audit logs, etc.)
• Proficient in reviewing and interpreting log data across different platforms (Windows, Linux, cloud, network appliances)
• Experience with CVE tracking, vulnerability scanners, and mitigation workflows
• Familiarity with standards such as ISO 27001 and common infosec frameworks
• Solid grasp of risk management principles (likelihood vs. impact, asset value, threat actor profiling, etc.)
• Experience assessing the business relevance of technical vulnerabilities and translating findings for stakeholders

• Hands-on incident response or blue team roles
• Exposure to SIEM platforms
• Understanding of chain-of-custody and legal considerations in evidence handling
• Experience in environments with regulatory requirements
• Familiarity with common services: SSH, DNS, HTTP(S), SMB, RDP
• IDS/IPS knowledge
• Ability to track vulnerabilities through to remediation
• Exposure to ISO 27001, NIST CSF, CIS Controls, MITRE ATT&CK
• Ability to perform hypothesis-driven hunts and pivot off findings
• Knowledge of cloud platforms: AWS, Linode, Hetzner
• Understanding of the CIA triad (Confidentiality, Integrity, Availability)

This position is subject to pre-employment screening, however candidates will not be unfairly discriminated against.

We receive a high number of applications per role and therefore ONLY successful applicants will be contacted.

This role is open to residents of the Republic of South Africa. Although we may consider candidates with permanent residency, preference will be given to citizens of the Republic of South Africa.

Netstock was founded with a clear vision: To give the hungry up-and-comers the capability to level the playing field and compete with the industry giants. Working here means embracing that “challenger” mentality: We are smart, scrappy fighters, building our edge with the agility to move faster than the big guys — pioneering smarter ways to work and innovating new ways to deliver powerfully easy to use technologies for our customers.

Netstock is the driving force accelerating the growth of organizations worldwide. Over the last 15 years, we’ve built out a regional presence that gives us deep insights into supply chain planning factors in each industry. We continue to enhance our supply chain planning solutions, making our predictive engine smarter, accelerating automation, and adding sophisticated new capabilities such as AI and machine learning.

You can read more about Netstock’s history and our product offering at Netstock