About the RoleAs a Cyber Security Specialist, you will play a pivotal role in proactively identifying, evaluating, and reducing the attack surface of our organization. Reporting to the Senior Director of Security Operations, you will leverage cutting-edge tools, threat intelligence, and cross-functional collaboration to ensure our external and internal digital assets are continuously monitored, inventoried, and protected.What Youll Do<ul><li>Attack Surface Discovery: Continuously identify and catalogue all external and internal assets (cloud, on-premises, IoT, third-party systems, etc.) using automated and manual discovery techniques.</li><li>Vulnerability Management: Evaluate discovered assets for vulnerabilities and misconfigurations; prioritize remediation efforts based on risk and business impact.</li><li>Threat Intelligence Integration: Correlate attack surface data with threat intelligence to contextualize findings and anticipate emerging risks.</li><li>Attack Surface Reduction: Partner with IT, DevOps, and application teams to minimize unnecessary exposures and streamline asset footprint.</li><li>Incident Response Support: Provide asset and exposure data during security incident investigations to enable rapid containment and remediation.</li><li>Reporting &amp; Metrics: Develop and present clear, actionable reports and dashboards for technical and executive audiences, including trend analysis and attack surface KPIs.</li><li>Tool Evaluation &amp; Management: Assess, deploy, and manage Attack Surface Management (ASM) platforms and related technologies.</li><li>Policy Development: Contribute to security policies, standards, and best practices surrounding asset inventory and exposure management.</li><li>Awareness &amp; Training: Educate stakeholders on attack surface risks and mitigation strategies.</li><li>Security Strategy: support the successful execution of the Security Strategy.</li></ul>What Youll Bring <ul><li>Experience: 3+ years in cyber security, with a focus on attack surface management, asset discovery, or vulnerability management in a large enterprise or technology environment.</li><li>Technical Skills: Strong understanding of networking, web technologies, cloud platforms (AWS, Azure, GCP), and security tooling (ASM, EDR, SIEM, etc.) and vulnerability scanning tools.</li><li>Analytical Abilities: Proficient in risk assessment, data analysis, and correlating technical findings with business risk.</li><li>Collaboration: Demonstrated ability to work with cross-functional teams, including IT, application development, and business units.</li><li>Certifications: Relevant security certifications preferred (e.g., CISSP, OSCP, GIAC, CompTIA Security+).</li><li>Communication: Excellent written and verbal communication skills; ability to convey complex technical issues to diverse audiences.</li><li>Familiarity with regulatory requirements (e.g., GDPR, HIPAA, PCI-DSS) and how they impact asset and exposure management.</li><li>Experience with automation and scripting for asset discovery and reporting (e.g., Python, PowerShell).</li><li>Background in incident response and digital forensics.</li></ul>What Join Us?You will be a key contributor to the organizations proactive cyber defence posture, directly supporting the Senior Director of Security Operations and influencing how the company manages digital risk in a dynamic technology landscape.The base salary range for this position is R560,000 −R840,000 plus benefits. This range represents the minimum and maximum new hire compensation for this role. The position may also be eligible for incentive plans and additional benefits, in accordance with company policy and local regulations. Our salary ranges are determined by role, level, and location with individual compensation also dependent on factors such as qualifications, experience, and skills. Final offers will reflect these considerations and may vary accordingly.#LI-YK1Belonging at MimecastCybersecurity is a community effort. That’s why we’re committed to building an inclusive, diverse community that celebrates and welcomes everyone – unless they’re a cybercriminal, of course.We’re proud to be an Equal Opportunity and Affirmative Action Employer, and we’d encourage you to join us whatever your background. We particularly welcome applicants from traditionally underrepresented groups.We consider everyone equally: your race, age, religion, sexual orientation, gender identity, ability, marital status, nationality, or any other protected characteristic won’t affect your application.Due to certain obligations to our customers, an offer of employment will be subject to your successful completion of applicable background checks, conducted in accordance with local law.