Durban: Principal Enginner – Security posted by K2 Recruit

About the Role

The Securelytics Principal Engineer will report to the Securelytics Business Unit Manager and work closely with the Securelytics Team, providing technical guidance and support on security solutions and services. The role demands expertise in driving cutting-edge security technology and operations platforms from Microsoft, Fortinet, and Sophos.

Key Responsibilities

• Delivery: Provide technical guidance support and serve as an escalation point for complex security issues.
• Implement Information Security solutions as needed.
• Implement formal monthly reporting for services delivered.
• Support the team in the following:
• Security Operations
• Threat Detection & Incident Response
• Threat Hunting & Vulnerability Management
• Prevention and Risk Management
• Risk identification and mitigation

• Solution Development: Provide detailed designs, architectures, bills of materials, high-level project plans, scope of works, deliverables for proposals and projects.
• Present to customers and complete demonstrations, proof of concept tests and assessments.
• Provide input into contracts for delivery of services.

• Stakeholder Collaboration and Communication:
• Work closely with IT, Security, and Risk Management teams to enhance security strategies.
• Provide regular security reports to stakeholders, detailing progress and risk mitigation efforts.
• Collaborate with project managers, service delivery teams, and sales teams on security-related initiatives.
• Maintain effective communication via company collaboration tools (Teams, CRM, Service Desk).

• Continuous Improvement & Compliance:
• Stay updated with the latest security threats, technologies, and best practices.
• Define and Implement standard operating procedures (SOPs).
• Conduct vulnerability audits to ensure compliance with industry standards and regulatory requirements.
• Research and recommend innovative security solutions to enhance organisational resilience.
• Provide a quality assurance service to check all outputs of the Security Operations team.

Requirements

• Minimum of 15 years of experience in Information Technology and 10 years in Cybersecurity
• Proven experience in progressively responsible technical roles, including leadership positions
• Strong technical and analytical skills
• Excellent problem-solving and critical-thinking skills
• Excellent communication and interpersonal skills
• Able to work as part of a team and independently
• Knowledge of best practices and secure design principles
• Able to work effectively in stressful situations
• Open-minded to personal growth and development
• A can-do now mindset

Qualifications

No formal qualifications mentioned.

Salary & Benefits

Salary information not provided.

SUMMARY OF KEY DELIVERABLES AND TIME ALLOCATION:

Area % Time Allocation Billable Hours

1. Delivery 50% Yes 80

2. Solution Development and Pre-sales 38% No 60

3. Stakeholder Collaboration and Communication 13% No 20

4. Continuous Improvement and Compliance Total 100% 160

JOB REQUIREMENTS

• Minimum of 15 years of experience in Information Technology and 10 years in Cybersecurity
• Proven experience in progressively responsible technical roles, including leadership positions
• Strong technical and analytical skills
• Excellent problem-solving and critical-thinking skills
• Excellent communication and interpersonal skills
• Able to work as part of a team and independently
• Knowledge of best practices and secure design principles
• Able to work effectively in stressful situations
• Open-minded to personal growth and development
• A can-do now mindset

Preferred Skills:

• Strong expertise in Microsoft security tools (e.g., Azure Sentinel, Microsoft Defender, Azure Security Center)
• In-depth understanding of advanced threat management, including tactics, techniques, and procedures (TTPs)
• Proven experience in managing complex security incidents and remediation processes
• Certifications such as Fortinet FCSS/NSE7, Sophos Architect, CISSP, CISM, CompTIA Advanced Security Practitioner (CASP+) or equivalent
• Familiarity with regulatory frameworks and compliance standards like Popia, PCI-DSS, GDPR, ISO 27001, CIS and NIST
• Strong communication skills for reporting to executives and educating stakeholders on security risks