Information Security Engineer

SUMMARY:
A well-established organisation is seeking an experienced Information Security Engineer to join its technology team on a permanent basis. This role is responsible for safeguarding the organisation’s data, systems, and networks against evolving cyber threats. The successful candidate will play a key role in strengthening the security posture, enhancing governance frameworks, and proactively managing risks across on-premise and cloud environments.

POSITION INFO:
This opportunity suits a security professional who thrives in a hands-on technical role while contributing to strategic security improvements.

Key Responsibilities:

• Analyse, research, and report on potential threats, vulnerabilities, and weaknesses across IT systems, applications, and networks.
• Conduct risk assessments and vulnerability management, recommending and implementing mitigation strategies.
• Implement and maintain security best practices aligned to frameworks such as ISO 27001, NIST CSF, PCI-DSS, and POPIA.
• Investigate, contain, and eradicate security incidents, including root cause analysis and post-incident reviews.
• Monitor network environments and manage service providers to ensure that security SLAs are met.
• Administer and maintain security hardware and software (firewalls, endpoint protection, and intrusion detection/prevention systems).
• Develop and maintain SOC/SIEM detection rules, dashboards, and incident playbooks.
• Support internal and external audits, ensuring alignment with information security policies and governance frameworks.
• Maintain security documentation, including risk registers, configuration baselines, and incident reports.
• Automate repetitive security tasks using scripting.
• Stay current with emerging threats and proactively recommend security improvements.

• Grade 12 (Matric).
• National Certificate or Bachelor’s Degree in IT, Computer Science, or equivalent experience.
• Certifications such as CompTIA A+, N+, Security+, and CEH highly advantageous.
• Strong understanding of security controls across network, application, cloud, and endpoint environments.
• Knowledge of security frameworks and compliance standards (ISO 27001, NIST, PCI-DSS, and POPIA).
• Experience with SOC/SIEM platforms, detection and response, and security automation.
• Familiarity with scripting languages such as Python, PowerShell, or Bash.
• Excellent communication skills with the ability to translate technical risk into business impact.
• Strong analytical thinking and problem-solving ability.

• Minimum 5 years’ experience in information and cybersecurity roles.
• Hands-on experience with networks, firewalls, VPNs, and network troubleshooting.
• Security experience across endpoint protection, email security, Office 365, Azure, AWS, and cloud environments.
• Exposure to antivirus, authentication, content filtering, IDS/IPS, and layered security controls.
• Proficiency with Windows Server, Windows Desktop, and Linux environments.
• Experience implementing and enforcing information security governance and policies.
• Exposure to Kali Linux, penetration testing tools, and vulnerability scanning solutions.
• Proven ability to analyse complex issues and implement practical security solutions.

• Critical thinker with strong attention to detail.
• Able to prioritise multiple security initiatives simultaneously.
• Passionate about cybersecurity and continuous learning.
• Proactive and solutions-driven mindset.

• Hybrid working model.
• Permanent role with long-term growth potential.
• Exposure to enterprise-level security environments.
• Market-related remuneration based on experience.