%20Ltd){kind=logo}
Security Engineer (Pretoria)
Hired Recruitment (Pty) LtdBenoni, South Africa23 hours ago
Job descriptionAWS Well Architected Framework Trusted Advisor GuardDuty / SCP / SSM / IAM / WAF Container services such as ECS / EKS Incident detection and response management. Performing penetration tests and vulnerability scans against networks and infrastructure, applications and AWS environments. Drafting and implementing security policies, security procedures, security design and implementation. ISO 14971 (risk management) compliance ISO 27032 (cybersecurity) compliance SOC2 Type 2 (with HiTrust attestation) or HiTrust experience (or equivalent) Deep understanding of automation, quality engineering, architectural methodologies, principles, and solution design. Familiarity with operational observability, including log aggregation, application performance monitoring, etc. Understanding of the following : Linux / Windows server and application administration and configuration, networking, scripting and automation, large scale distributed computing architecture. Solid knowledge of IT security (firewalls, EDR, IDS / IPS, SOAR, vulnerability scanning forensic and Threat Hunting). Understanding of AWS ECS & Kubernetes and Containerisation (Docker / Podman / Containerd) with implementation, support, and design. Knowledge in security classification frameworks like MITRE or the cyber-attack kill chain. Good knowledge and understanding of industry standards, memberships, and frameworks such as CIS and SOC 2. Drive development standards and processes related to cybersecurity compliance. Monitor all cybersecurity processes, operations and infrastructure, monitoring internal and external policy and regulatory compliance. Review and evaluate development designs (for existing products and during design phase for new products) to identify gaps in cybersecurity controls, and drive updates to any cybersecurity or compliance documentation. Liaise with internal and external stakeholders to prepare for SOC2 Type 2 and HiTrust). Drive cybersecurity audit strategy and readiness from a dev, security and devops perspective. Identify, implement and maintain all security tools and technology. Schedule (and ideally automate) internal vulnerability scans, remediating findings and ensuring accurate & timely reporting to satisfy PCI DSS requirements. Schedule annual Penetration Tests with external supplier(s) and ensure implementation of items identified in remediation plans. Complete required cybersecurity applications and records for large customers and audits, including reporting as required. Drive and action where required the planning, installation, monitoring and maintenance of IT systems and infrastructure focused on cyber security including any penetration testing that is required. Design and execute short- and long-term initiatives to detect and prevent any security vulnerabilities in the IT infrastructure (cloud, security and devops) to meet current and future needs. Develop, execute and oversee procedures, policies and related training plans for cybersecurity project management and infrastructure administration. Conduct research and recommend changes in services, products, protocols, and standards to support development efforts and infrastructure procurement. Define software and hardware security standards in collaboration with stakeholders and owners for the provisioning of the development and IT infrastructure. Ensure appropriate security levels on network, infrastructure and servers are maintained, ensuring that the IT team follows the requirements set in line with cybersecurity standards. Implement cybersecurity continuous improvement programs. Crisis management - keeping stakeholders informed and actively working with teams to return service in the shortest possible time frame. This would include documenting all disaster recovery procedures. Effective management and optimisation of vendors (where applicable) as well as collaborating with the dev and IT teams as necessary. Collaborate with divisional the RAQA team and Senior Managers to define and centralize risks and put mitigation measures in place for new and existing products and services, from a cybersecurity and privacy perspective. Improve the automation of security controls. Work closely with the dev team on defining industry-standard processes and system requirements, identifying and proposing fixes to shortcomings in the development lifecycle, code reviews and scanning as well as infrastructure provisioning. Work with the dev team to ensure that security standards and policies are being set up and configured correctly, ensuring adherence to certifications and best-practice. Assist with remediations on risk items identified from security and preventative detection reviews to ensure compliance and ensure the security posture of the IT landscape is ensured at all times. Remediate audit items by putting measures in place to prevent the recurrence of findings. For example, by making sure that audit findings are resolved by the relevant personnel and that the resolutions are such that they prevent the item from reoccurring in the future. Manage internal and external audits as required with relation to cybersecurity. Maintain documentation for cybersecurity-related risks, processes and findings. Manage annual cybersecurity roadmap, IT audit (internal and external) plan and calendar. Work closely with the Compliance team to gather and submit evidence for all security and IT audits. Proactively keep stakeholders updated on status, progress, risks and problems. Review and approve documented outcomes of Penetration Tests, Remediation Plans and required activities. Review and approve documented outcomes of Vulnerability Scans, Remediation Plans and required activities. Maintain cybersecurity documents and records in line with certification requirements. Maintain document bank and matrix for the cybersecurity setup and external customer-audit matrix requests. For example, ensuring that all cybersecurity related information, such as architectural diagrams, asset lists, asset control lists and vulnerabilities, can be referenced from a single central source from which to direct the readers to the appropriate resources.
Job Purpose :
Responsible for company-wide cybersecurity and related documents, process and record management to ensure that systems and products are safe and effective. Ensures data integrity, and that information is kept accurate and consistent unless authorized changes are made (and documented), and that confidentiality is upheld by protecting information from unauthorized access. Responsible for cybersecurity compliance and training throughout the Company.
As our IT Security Engineer, you'll support us by taking the lead on cybersecurity and working with the team to perform ongoing operations, administration, and development of security systems, as well as implementing fixes that would protect our systems. You will continuously work towards high confidence and high accuracy detection rules leveraging abnormal or suspicious events.
Minimum education (essential) :
Engineering degree (Computer, Software, Mechanical or Electronic)
Minimum education (desirable) :
- OSCP (Offensive Security Certified Professional)
- PNPT (Practical Network Penetration Tester)
- CISSP (Certified Information Systems Security Professional)
- CCSP (Certified Cloud Security Practitioner)
Minimum applicable experience (years) :
AWS' ecosystem :
The following would be advantageous :
Skills and Knowledge (essential) :
Cybersecurity Management 40%
Infrastructure Management 30%
Risk Management and Compliance 20%
QMS and Documentation 10%
Create a job alert for this search
Pretoria • Benoni, South Africa
Related jobs%20Ltd)
A leading security engineering firm is looking for a hands-on Professional Services Engineer in Cape Town to solve complex security problems.
This role involves engaging with customers, building aut...Show moreLast updated: 1 day ago
%20Ltd)
A digital solutions company in Gauteng is seeking an experienced Level 3 Security Engineer to join their team.This permanent position involves providing advanced technical support, mentoring junior...Show moreLast updated: 3 days ago 
- Promoted
Cloud Security Engineer
Dina Gates Recruitment (Pty) LtdJohannesburg, South Africa At least 4-7 years of Cloud Experience (AWS, Azure or GCP (Google)).Securing cloud environments and protecting data.Implementing security measures, monitoring cloud infrastructure for threats, and ...Show moreLast updated: 30+ days ago
- Promoted
Security Solutions Engineer : Remote, Hands-on & High Impact
RedherdWorkFromHome, Gauteng, South AfricaRemote
- Promoted
Cyber Security Engineer
The Skills MineJohannesburg, South Africa A Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field.A minimum of 3 to 6 years of experience in cybersecurity operations or SOC environments.Hands-on e...Show moreLast updated: 12 days ago
- Promoted
Team Lead Security Engineer
Hire ResolveGauteng, South Africa A leading provider in vehicle tracking, telematics, and security technology is seeking a highly skilled Team Lead Security Engineer to head up a dedicated security engineering team.The position cal...Show moreLast updated: 30+ days ago
- Promoted
Security Engineer
The Hiring HousePretoria, Gauteng, South Africa Risk Management and Compliance.Engineering degree (Computer, Software, Mechanical or Electronic).OSCP (Offensive Security Certified Professional).
PNPT (Practical Network Penetration Tester).CISSP (...Show moreLast updated: 30+ days ago
- Promoted
Cyber Security Engineer
Network ContractingJohannesburg, South Africa Job & Company Description : .Im looking for Cyber Security Engineers for contract and long-term assignment roles across Gauteng.
These positions offer exposure to modern security tools, and collab...Show moreLast updated: 17 days ago
- Promoted
L3 Security Engineer
Three6FiveGauteng, South Africa Three6five Digital Solutions in Midrand are seeking an experienced Level 3 Security Engineer to join their motivated and busy team with this permanent position.
Escalation point for L1 and L2 engine...Show moreLast updated: 2 days ago
- Promoted
Security Engineer
Air ChefsPretoria, Gauteng, South Africa We're looking for an experienced Security Engineer to support our cybersecurity and compliance efforts across product, operations, and infrastructure.
Cybersecurity Management (40%).Develop and main...Show moreLast updated: 24 days ago
- Promoted
Azure Cloud Security Engineer – Vulnerability & Pen Testing
Inkhanyeti Solutions (Pty) LtdJohannesburg, Gauteng, South Africa A technology solutions provider is seeking a skilled Cloud Security Engineer to join their team on a renewable contract basis.
The role involves conducting and responding to vulnerability assessment...Show moreLast updated: 3 days ago
- Promoted
Security Engineer
AiRPretoria, Gauteng, South Africa Cybersecurity Management (40%).Develop and maintain security standards and processes to support compliance requirements.Oversee cybersecurity operations and ensure alignment with internal policies ...Show moreLast updated: 26 days ago
- Promoted
Security Engineer
NintexJohannesburg, Gauteng, South Africa At Nintex we are transforming the way people work everywhere.As the global standard for process intelligence and automation.
Our customers from industry giants like Amazon Coca-Cola and Microsoft re...Show moreLast updated: 30+ days ago
- Promoted
Security Engineer
wePlacePretoria, Gauteng, South Africa Responsible for company-wide cybersecurity and related documents, process and record management to ensure that systems and products are safe and effective.
Ensures data integrity, and that informati...Show moreLast updated: 30+ days ago
- Promoted
Pre-Sales Engineer (Security Industry)
JeloCorpJohannesburg, South Africa Our Client is a world-leading video-centric AIoT solution and service provider.The company supports urban development by enhancing management efficiency, enabling autonomous city operations, upgrad...Show moreLast updated: 30+ days ago
- Promoted
Security Engineering Team Lead — Protect Critical Systems
Hire ResolveGauteng, South Africa A leading provider in security technology is seeking a skilled Team Lead Security Engineer to head a dedicated team.This role requires a Bachelor's degree in Information Security or a related field...Show moreLast updated: 1 day ago
- Promoted
Cloud Security Engineer
Inkhanyeti Solutions (Pty) LtdJohannesburg, Gauteng, South Africa We are seeking a skilled Cloud Security Engineer to join our team on a renewable contract basis.The ideal candidate must have experience in conducting, coordinating, and responding to vulnerability...Show moreLast updated: 30+ days ago
- Promoted
L3 Security Engineer : Lead, Pre-Sales & Remote Support
Three6FiveGauteng, South AfricaRemote
- Promoted
Security Engineer
OutsidecapitalJohannesburg, Gauteng, South Africa We are exclusively representing a mission-driven global leader in the Health-Tech sector.This rapidly scaling organization is dedicated to developing smart affordable digital health solutions that ...Show moreLast updated: 30+ days ago
- Promoted
SOC Engineer L3 Cyber Security Specialist
60 DegreesCenturion, Gauteng, South Africa Are you obsessed with uncovering digital threats fine-tuning detection strategies and architecting bulletproof incident response plans Then stop scrolling this is the opportunity you’ve been huntin...Show moreLast updated: 30+ days ago