Information Security Engineer

SUMMARY:
A well-established organisation is seeking an experienced Information Security Engineer to join its technology team on a permanent basis. This role is responsible for safeguarding the organisation’s data, systems, and networks against evolving cyber threats. The successful candidate will play a key role in strengthening the security posture, enhancing governance frameworks, and proactively managing risks across on-premise and cloud environments.

POSITION INFO:
This opportunity suits a security professional who thrives in a hands-on technical role while contributing to strategic security improvements. Key Responsibilities: Analyse, research, and report on potential threats, vulnerabilities, and weaknesses across IT systems, applications, and networks. Conduct risk assessments and vulnerability management, recommending and implementing mitigation strategies. Implement and maintain security best practices aligned to frameworks such as ISO 27001, NIST CSF, PCI-DSS, and POPIA . Investigate, contain, and eradicate security incidents, including root cause analysis and post-incident reviews. Monitor network environments and manage service providers to ensure that security SLAs are met. Administer and maintain security hardware and software (firewalls, endpoint protection, and intrusion detection\/prevention systems). Develop and maintain SOC\/SIEM detection rules, dashboards, and incident playbooks . Support internal and external audits, ensuring alignment with information security policies and governance frameworks. Maintain security documentation, including risk registers, configuration baselines, and incident reports. Automate repetitive security tasks using scripting. Stay current with emerging threats and proactively recommend security improvements. Qualifications & Requirements: Grade 12 (Matric). National Certificate or Bachelor's Degree in IT, Computer Science, or equivalent experience. Certifications such as CompTIA A+, N+, Security+, and CEH highly advantageous. Strong understanding of security controls across network, application, cloud, and endpoint environments . Knowledge of security frameworks and compliance standards (ISO 27001, NIST, PCI-DSS, and POPIA). Experience with SOC\/SIEM platforms, detection and response, and security automation. Familiarity with scripting languages such as Python, PowerShell, or Bash . Excellent communication skills with the ability to translate technical risk into business impact. Strong analytical thinking and problem-solving ability. Experience Required: Minimum 5 years' experience in information and cybersecurity roles. Hands-on experience with networks, firewalls, VPNs, and network troubleshooting . Security experience across endpoint protection, email security, Office 365, Azure, AWS, and cloud environments . Exposure to antivirus, authentication, content filtering, IDS\/IPS, and layered security controls. Proficiency with Windows Server, Windows Desktop, and Linux environments. Experience implementing and enforcing information security governance and policies. Exposure to Kali Linux, penetration testing tools, and vulnerability scanning solutions . Proven ability to analyse complex issues and implement practical security solutions. Key Competencies: Critical thinker with strong attention to detail. Able to prioritise multiple security initiatives simultaneously. Passionate about cybersecurity and continuous learning. Proactive and solutions-driven mindset. What's On Offer: Hybrid working model. Permanent role with long-term growth potential. Exposure to enterprise-level security environments. Market-related remuneration based on experience. Apply Now! For more information contact: Raees Sadek IT Recruitment Researcher