Azure & Microsoft Cloud Security Lead – Strategy & Incident Response

Ilaunch (Pty) Ltd; South Africa; Hybrid; ZAR 1,200,000 - 1,800,000; Full time

Benefits offered by this job

Annual bonus

Health, dental, and vision insurance

Paid time off

Retirement savings options

Certifications support

Leadership opportunities

Job summary

Ilaunch (Pty) Ltd in Sandton is seeking an Azure Microsoft Cloud Security Lead to own incident response and security operations within a hybrid/remote setup. You will drive vulnerability remediation, patch management and security controls across IT and infrastructure teams.

The role requires 6–10 years in cybersecurity operations, with SME-level certifications and hands-on experience with Microsoft Defender for Endpoint, Microsoft Sentinel, and Microsoft 365 security tools.

Qualifications

• Matric (Grade 12).
• Bachelor's degree in Information Security, Computer Science, Information Technology or related field.
• CISSP, GCIH, CEH, CompTIA Security+/CySA+ or relevant Microsoft security certifications are highly relevant.
• Microsoft Defender for Endpoint, Microsoft Sentinel and Microsoft 365 security tools experience.

Responsibilities

• Lead remediation and recovery of security incidents identified by the virtual SOC.
• Coordinate vulnerability management and remediation across IT and infrastructure teams.
• Drive patch management and ensure remediation tracking.
• Maintain and optimise EDR and network segmentation controls.
• Review security incidents, patching activity and remediation effectiveness.
• Improve SOC alert handoffs, workflows and reporting.
• Develop incident response playbooks and procedures.
• Manage third‑party SOC and security providers per SLAs.
• Support continuous improvement of security controls and operational resilience.
• Ensure security operations align with baselines, frameworks and compliance.

Skills

Incident Response

SOC Operations

Vulnerability Management

Patch Management

EDR

Network Segmentation

Security Frameworks

Stakeholder Management

Education

Bachelor's degree in Information Security/CS/IT

Matric (Grade 12)

Tools

Microsoft Defender for Endpoint

Microsoft Sentinel

Microsoft 365 security tools

Job description

• What Azure Microsoft Cloud Security Lead Strat...

Showing 108 Azure Microsoft Cloud Security Lead Strategy Incident Response jobs in Gauteng

Join a global organisation with a diverse and complex technology environment, where cybersecurity is critical to protecting the business and enabling its continued growth.
This is a key role within Group Information Security, responsible for ensuring that cyber threats are identified, contained and remediated quickly, while strengthening the organisations security controls and reducing overall cyber risk.
You’ll work closely with the SOC, IT Infrastructure & Operations, Service Desk, DevSecOps, Risk & Compliance teams and external security providers to ensure the organisation remains protected against an evolving threat landscape.
You are a decisive, analytical and hands‑on security professional who stays calm under pressure and takes ownership when incidents occur.
You can translate technical security requirements into practical action, collaborate effectively with both technical and non‑technical stakeholders, and continuously look for ways to improve security operations and response capabilities.
Why this opportunity?
This is an opportunity to play a critical role in protecting a large enterprise environment, leading security defence and operations while helping shape stronger incident response, vulnerability management and security controls.
If you have the technical depth, operational leadership and cyber resilience mindset to take ownership of an organisations security defence - we want to hear from you.

Duties:

• Lead the remediation and recovery of security incidents identified by the virtual Security Operations Centre (SOC).
• Coordinate vulnerability management and remediation across IT and infrastructure teams.
• Drive patch management and ensure vulnerabilities are tracked, prioritised and resolved.
• Maintain and optimise Endpoint Detection & Response (EDR) and network segmentation controls.
• Review security incidents, patching activity and remediation effectiveness.
• Optimise SOC alert handoffs, workflows and reporting to improve response times and reduce false positives.
• Develop and maintain practical incident response playbooks and operational procedures.
• Manage and monitor third‑party SOC, vulnerability management and security service providers against agreed SLAs.
• Support continuous improvement of the organisations security controls, processes and operational resilience.
• Ensure security operations align with relevant security baselines, frameworks and compliance requirements.

Job Experience & Skills Required:

Qualifications:

• Matric (Grade 12)
• Bachelors degree in Information Security, Computer Science, Information Technology or a related field.
• CISSP, GCIH, CEH, CompTIA Security+/CySA+ or relevant Microsoft security certifications are highly relevant.
• Microsoft SC-200, SC-300 and SC-900, together with experience using Microsoft Defender for Endpoint, Microsoft Sentinel and Microsoft 365 security tools.

Experience:

• 6 - 10 years of progressive experience in cybersecurity operations, including hands‑on incident response and threat remediation.

Skills & Competencies:

• Incident Response & Threat Remediation
• SOC Operations & Threat Detection
• Vulnerability Management & Remediation
• Patch Management
• Endpoint Detection & Response (EDR)
• Security Controls & Network Segmentation
• Cybersecurity Frameworks NIST & MITRE ATT&CK
• Stakeholder & Third‑Party Security Provider Management

Competitive salary and annual bonus structure.
Comprehensive health, dental, and vision insurance plans.
Significant paid time off and retirement savings options.
Support for advanced certifications and professional growth.
A dynamic and challenging work environment with leadership opportunities.

We welcome applications from all backgrounds, in compliance with the Employment Equity Act and equal‑opportunity policy.

Location: Sandton
Contract: Permanent (Full‑time)
Work arrangements: Hybrid or remote options possible.

As a remote‑first organisation, we adhere to high standards of integrity in our hiring process and maintain a zero tolerance policy for fraud. All information submitted must be truthful and complete.