Cape Town: Mid Cybersecurity Engineer (CPT Hybrid) posted by DataFin Recruitment

About the Role

We are seeking an experienced Mid Cybersecurity Engineer to join our team at DataFin Recruitment. As a technical specialist, you will design, deploy, support, and optimize solutions to secure enterprise environments to the highest standards. This is a hands-on role with a strong emphasis on solution architecture, advanced deployments, integrations, troubleshooting, and L3/L4 escalation support.

Key Responsibilities

• Design and implement scalable security architectures across enterprise environments (1,000+ endpoints, multi-site).
• Deploy and optimize solutions across:
• Endpoint Protection (EPP)
• EDR/XDR
• Data Loss Prevention (DLP)
• Endpoint Encryption
• Mobile Device Management (MDM)
• Mail Security
• Vulnerability and Patch Management
• Ensure high availability, performance optimisation, and security best practices.
• Lead end-to-end deployment and configuration of solutions.
• Manage large-scale rollouts with minimal disruption to business operations.
• Perform continuous optimisation and tuning of security policies and detection mechanisms.
• Provide Tier 3 and Tier 4 technical support for complex issues.
• Conduct deep troubleshooting, root cause analysis, and remediation.
• Collaborate with vendor support teams for critical escalations.
• Produce detailed technical reports and resolution documentation.
• Integrate solutions with:
• SIEM/SOAR platforms (e.g., Splunk, QRadar, Microsoft Sentinel)
• Identity systems (Active Directory, Azure AD)
• Cloud environments (AWS, Azure, GCP)
• Develop automation scripts using PowerShell and/or Python for deployment, monitoring, and reporting.
• Support security operations through:
• Threat detection and analysis
• Incident investigation and response
• Threat hunting aligned with the MITRE ATT&CK framework
• Analyse logs, alerts, and endpoint activity to identify and mitigate threats.
• Deliver advanced technical training sessions, webinars, and workshops.
• Develop:
• Technical documentation
• Standard Operating Procedures (SOPs)
• Troubleshooting guides
• Provide hands-on enablement for internal teams, partners, and customers.
• Collaborate with IT teams, security teams, and leadership to:
• Validate deployments
• Improve security posture
• Recommend policy enhancements
• Present technical findings to both technical and non-technical audiences.
• Represent the organisation in technical discussions, webinars, and industry forums.

Requirements

### Qualifications

Bachelors Degree in Computer Science, Cybersecurity, or a related field.

Experience/Skills

• 5 – 8+ Years of hands-on experience in Cybersecurity
• Strong expertise in:
• Endpoint Security (EPP, EDR/XDR)
• Security Operations and threat detection
• Proven experience in:
• Large-scale enterprise deployments (1000+ endpoints)
• Advanced troubleshooting and debugging
• Tier 3 support environments
• Strong technical knowledge of:
• Windows, macOS, and Linux operating systems (Must Have)
• Networking fundamentals (TCP/IP, DNS, firewalls)
• Cloud platforms (AWS, Azure, GCP)
• Microsoft 365 and/or Google Workspace environments
• Experience with:
• SIEM/SOAR integrations
• Vulnerability and patch management solutions
• Compliance frameworks (GDPR, ISO 27001, SOC 2, NIST CSF, POPIA)
• Strong scripting and automation skills (PowerShell, Python, or Bash).
• Preferred Experience:
• Experience working with Cybersecurity vendors or distributors.
• Background in:
• Incident response
• Threat hunting
• Security operations (SOC environments)
• Highly Desirable:
• CompTIA Security+, CySA+
• CISSP, CEH, CHFI
• Network Certifications (e.g., CCNA, Network+)
• IT Service Management Certification (e.g., ITIL)
• Vendor Certifications in EDR/XDR platforms
• Linux Certification