Senior Information Security Engineer

SUMMARY:
Senior Information Security Engineer

POSITION INFO:
Role: Senior Information Security Engineer Category: Information Technology Location: Waterfall, Midrand Salary: Market-related Our client, a growing financial services organization, is seeking a strategic technical leader to support both on-premises and cloud-based environments. This permanent role is based in Waterfall, Midrand, and is available immediately. The successful candidate will design, implement, and optimize advanced security architectures across our client''s hybrid infrastructure, applications, and cloud environments. This senior engineer will drive security initiatives, collaborate with IT leadership to strengthen the enterprise security strategy, and ensure compliance with global standards and regulatory requirements. Key Responsibilities: Security Architecture & Engineering: Lead the design and implementation of advanced security controls across on-prem, cloud, and SaaS environments, including Azure and Microsoft 365. Define security architecture standards, maintain enterprise firewalls, and manage Web Application Firewall (WAF) solutions. Security Operations Leadership: Oversee and optimize security tools such as SIEM, EDR, DLP, and vulnerability management platforms. Develop automation strategies for threat detection, integrate SOC services into the operations framework, and manage SLAs for outsourced SOC providers. Incident Response & Threat Management: Act as the escalation point for critical security events, lead major investigations and forensic analysis, and drive proactive threat hunting. Identity & Vulnerability Management: Enforce enterprise-level identity governance using Microsoft Entra ID (Azure AD), implement zero-trust principles, and define vulnerability management strategies. Compliance & Risk Advisory: Ensure strict alignment with ISO 27001, NIST CSF, CIS benchmarks, POPIA, GDPR, and FSCA regulations. Lead technical audits, penetration tests, and red\/blue team exercises. Reporting & Awareness: Deliver board-level presentations, strategic risk dashboards, and configuration reports. Develop and measure engaging security awareness programs to educate employees and promote a culture of cybersecurity. Requirements: Education: A Diploma or Bachelor's degree in IT, Computer Science, or a related field. Certifications: CISSP, CISM, or equivalent senior-level certifications, alongside Microsoft Certified: Cybersecurity Architect Expert or SC-series certifications. Experience: 7+ years in cybersecurity or security engineering, with a minimum of 3 years acting in a senior or lead capacity. Technical Skills: Expert-level knowledge of SIEM, EDR, firewalls, and DLP platforms. Strong experience with scripting (PowerShell, Python), identity governance, zero-trust architecture, and cloud security. Preferred Background: Experience with Hillstone security technologies, NGINX, Microsoft InTune, Microsoft Purview, and various SIEM solutions. Competencies: Excellent communication skills for both executive and technical audiences, strong troubleshooting abilities, proficiency in ITSM tools, and a proven ability to mentor junior engineers. Must be highly ethical, resilient, and results-oriented.