Cape Town City Centre: Senior Information Security Engineer

About the Role

We are seeking an experienced Senior Information Security Engineer to join our team in Cape Town City Centre. As a key member of our security operations, you will be responsible for designing and implementing advanced security controls across on-premises, cloud, and SaaS environments, including Azure and Microsoft 365. You will also champion secure development lifecycle practices, lead incident response efforts, and provide expert guidance on risk mitigation strategies.

Key Responsibilities

• Lead the design and implementation of advanced security controls across on-prem, cloud, and SaaS environments (Azure, Microsoft 365)
• Define security architecture standards and review new technology integrations for compliance
• Champion secure development lifecycle practices and perform advanced application security assessments
• Configure and maintain enterprise firewalls to ensure optimal security and performance
• Implement and manage Web Application Firewall (WAF) solutions to protect against application-layer attacks
• Oversee, configure, and optimize security tools (Firewalls, Webservers, SIEM, EDR, DLP, vulnerability management platforms)
• Develop automation strategies for threat detection and response, integrating with ITSM platforms
• Establish operational playbooks and mentor team members on best practices
• Collaborate with outsourced SOC teams to ensure effective monitoring and incident escalation
• Integrate SOC services into the company’s security operations framework for seamless threat detection and response
• Manage SLAs and performance metrics for outsourced SOC providers
• Lead major incident investigations, forensic analysis, and root cause determination
• Act as escalation point for critical security events and coordinate cross-functional response
• Drive proactive threat hunting and advanced analytics initiatives
• Define vulnerability management strategy and ensure timely remediation of critical risks
• Provide executive-level reporting on risk exposure and remediation progress
• Implement advanced privileged access management and zero-trust principles
• Develop and deliver security awareness programs to educate employees on cybersecurity best practices

Requirements

• Diploma or Bachelor’s degree in IT, Computer Science, or related field
• CISSP, CISM, or equivalent senior-level certifications
• Microsoft Certified: Cybersecurity Architect Expert or SC-series certifications
• 7 years of experience in cybersecurity or security engineering roles, with at least 3 years in a senior or lead capacity

Qualifications

• None mentioned