Cybersecurity Engineer (Microsoft 365, Active Directory, Group Policy, DNS, DHCP, Microsoft Entra ID (Azure AD) (CPT Onsite)

SUMMARY:
-

POSITION INFO:
ENVIRONMENT: SUPPORT the Cybersecurity strategy of a dynamic Internet Service & Network Specialist seeking your technical expertise as a Cybersecurity Engineer where you will deploy and maintain security solutions, investigate security events, manage vulnerabilities, and ensure compliance with security standards and regulatory requirements. You will further be responsible for the implementation, operation, monitoring, and continuous improvement of Cybersecurity technologies and controls that safeguard the organization's information assets. The role focuses on securing network, endpoint, cloud, and application environments through effective threat detection, vulnerability management, incident response, and security engineering practices. Working closely with IT and business stakeholders, you will help ensure that security is embedded into operational processes and technology initiatives while supporting the organization's resilience against cyber threats. The successful candidate must have Matric\/Grade 12, a Degree\/Diploma in IT with 3-5 years' relevant work experience including hands-on experience administering and securing Microsoft Windows Server environments. Your tech tools should include Microsoft 365, Active Directory, Group Policy, DNS, DHCP, and Microsoft Entra ID (Azure AD).   DUTIES: Security Engineering & Implementation - ·        Deploy, configure, and maintain security technologies across network, endpoint, cloud, and application environments. ·        Administer security tools such as Firewalls, IDS\/IPS, EDR\/XDR, SIEM, IAM, and DLP solutions. ·        Perform system hardening in line with security standards and best practices. ·        Ensure security controls remain operational, effective, and appropriately configured.   Security Monitoring & Threat Management - ·        Monitor security environments for suspicious activity and potential threats. ·        Analyse logs, alerts, and events using SIEM and other monitoring tools.   Vulnerability & Risk Management - ·        Conduct vulnerability scans and assessments. ·        Assist with penetration testing activities and remediation planning. ·        Track vulnerabilities through to closure. ·        Support patch management and system remediation efforts.   Incident Response & Recovery - ·        Participate in incident investigation, containment, eradication, and recovery activities. ·        Execute incident response procedures and playbooks. ·        Assist in root cause analysis and post-incident reviews. ·        Maintain incident documentation and evidence.   Compliance & Governance - ·        Support compliance initiatives relating to ISO 27001, NIST, CIS Controls, POPIA, and other applicable frameworks. ·        Assist with audits and compliance assessments. ·        Maintain security documentation, standards, procedures, and records. ·        Monitor adherence to security policies and standards.   Stakeholder Engagement - ·        Work closely with IT Operations, Infrastructure, Cloud, and Application teams. ·        Communicate technical findings and recommendations effectively. ·        Provide security guidance and awareness support to internal stakeholders. ·        Contribute to knowledge sharing and continuous improvement initiatives.   REQUIREMENTS: Qualifications – ·        Matric \\ Grade 12 (Compulsory). ·        Degree or Diploma in Information Technology.   Experience\/Skills – ·        3-5 Years' experience in IT Infrastructure, Systems Administration, or Cybersecurity. ·        Hands-on experience administering and securing Microsoft Windows Server environments. ·        Experience with Active Directory, Group Policy, DNS, DHCP, and Microsoft Entra ID (Azure AD). ·        Experience with Microsoft 365 administration and security technologies. ·        Exposure to security monitoring, incident response, and vulnerability management. ·        Experience implementing and supporting security solutions such as firewalls, EDR\/XDR, SIEM, and IAM. ·        Working knowledge of Microsoft Azure and Cloud Security principles. ·        Experience with system hardening, patch management, and security best practices. ·        Exposure to security frameworks and compliance requirements such as ISO 27001, NIST, CIS Controls, and POPIA. ·        Valid Driver’s License and willingness to travel to client sites or project locations as required.   Desired – Not Mandatory Certifications: Ø  Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900) Ø  Microsoft Certified: Information Security Administrator Associate (SC 401) Ø  MCSE: Core Infrastructure\/ MCSA Windows Server 2016 Ø  Microsoft Certified: Windows Server Hybrid Administrator Associate Ø  Microsoft 365 Certified: Endpoint Administrator Associate Ø  Fortinet NSE4 Ø  CC Cybersecurity Ø  CompTIA Security+ Ø  CySA (CompTIA Cybersecurity Analyst)   ATTRIBUTES: ·        Problem Solving & Critical Thinking. ·        Team Collaboration. ·        Communication & Reporting. ·        Adaptability & Continuous Learning. ·        Stakeholder Management. ·        Project Coordination. ·        Technical Documentation. ·        Risk-Based Decision Making.