Cloud Security Engineer (DevSecOps)

Parvana; Cape Town; Híbrido; ZAR 700 000 - 1 100 000; Tempo integral

Resumo da oferta

Parvana is seeking a Cloud Security Engineer in Cape Town to join a global investment advisory firm with hybrid in-office/remote options. You will lead daily security operations, strengthen cloud security across CI/CD pipelines and IaC, and implement security controls in Azure and other environments.

The role focuses on incident response planning, threat monitoring with Defender for Cloud and Datadog, CSPM, and container security with AKS.

Qualificações

• Minimum 5 years in a Security Operations or Cloud Security Engineering role.
• Hands-on cloud security experience with IaC tooling, CI/CD security, container security (AKS), Defender for Cloud and Datadog for code security and CSPM.
• Familiar with MITRE ATT&CK, OWASP Top 10, SANS Top 20 and ISO 27001:2022; GDPR knowledge.
• Experience in incident response planning and governance.

Responsabilidades

• Manage daily security operations, including handling support tickets, monitoring security tools, investigating incidents and incident response.
• Configure and operate core security tools, implement security standards, and manage vulnerability management.
• Embed security across cloud environments and CI/CD pipelines using IaC security scanning and containerization.
• Provide security advice for projects, contribute to security designs and policies, ensure secure cloud service implementations.
• Support security awareness programs through staff training and awareness of threats.

Conhecimentos

Security operations

Cloud security engineering

Incident response planning

Threat detection

CI/CD security

Formação académica

Microsoft or SANS security certifications desirable

Ferramentas

EDR

SWG

UEBA

SEG

PAM

SSO

Defender for Cloud

Datadog

CSPM

AKS

Terraform

Descrição da oferta de emprego

Cape Town, South Africa | Posted on 26/10/2026

Location: Cape Town | Work Type:Hybrid / Remote| Contract Duration:12 months (With the option to gopermanent) | Job ID:J107283

About our client:

Our client is a global investment advisory firm focusing onlong-term value creation through investment strategies. They workwith a diverse group of institutional partners and pride themselveson their collaborative, sustainable, inclusive culture andperformance. You are welcome to go into the office daily or to takeadvantage of their hybrid in-office / remote benefit. This companyplaces significant investment in employee wellness, their benefitswhich are on top of generous basic salaries, are industry leading intheir generosity. Our client is large, offering fantastic careerdevelopment opportunities but also very dynamic, they track as manymetrics as possible in order to continuously improve - they spare noexpense on the tools to do so. Automation, AI and R&D arepillars of their business framework which ensures you should neverbe at risk of falling behind or getting stuck working with oldlegacy software. Culturally they are very cosmopolitan and diverse,you will be working with the best globally.

What you will be doing:

• Manage daily security operations, including handling supporttickets, monitoring security tools (internal and managed SOC),investigating incidents, major incident response, operatingrunbooks, and monitoring threat feeds.
  
• Configure and operate core security tools (EDR, SWG, UEBA,SEG, PAM, SSO), implement technical security standards, provideinput on security posture, and manage the vulnerabilitymanagement process.
  
• Embed security across cloud environments and CI/CDpipelines, leveraging Infrastructure as Code (IaC) securityscanning, containerization practices (AKS), and tools likeMicrosoft Defender for Cloud and Datadog for both code securityand Cloud Security Posture Management (CSPM).
  
• Offer technical security advice for projects (controldesign, process review, SSDLC input), contribute to technicalsecurity designs and policies, ensure the secure implementationof cloud services, and research emerging threats/vulnerabilities.
  
• Support ongoing security awareness programs through stafftraining, running phishing tests, and communicating new/emergingthreats via intranet announcements.
  

What our client is looking for:

• Minimum 5 years in a Security Operations or Cloud SecurityEngineering role, demonstrating strong technical expertiseacross security monitoring, detection, prevention, and control systems.
  
• Strong hands-on cloud security experience, includingInfrastructure as Code (IaC) tooling, Securing CI/CD pipelines,container security and orchestration (AKS), and operationalizingtools such as Defender for Cloud and Datadog for code securityand CSPM.
  
• Hands-on experience with security incident response planningand ensuring its ongoing effectiveness.
  
• Expertise in Azure, M365, OWASP Top 10, SANS Top 20, and theMITRE ATT&CK framework (Microsoft or SANS certifications are desirable).
  
• Knowledge of industry standards (e.g., ISO 27001:2022), datahandling best practices, and expertise in global data protectionlaws (e.g., GDPR), especially for the financial sector.
  
• Ability to stay current with evolving threat actor Tactics,Techniques, and Procedures (TTPs) and necessary mitigation mechanisms.
  
• A passion for creating secure, scalable, and resilientsystems; strong problem-solving skills; a desire to be part of ahighly effective, service-orientated cyber security function;and a commitment to ethics, compliance, and urgency.
  

Cloud Security Engineer, Infrastructure as Code (IaC), CI/CDSecurity, Defender for Cloud, Datadog, CSPM, Code Security,Containers, AKS, Azure, Incident Response, EDR, SWG, UEBA, PAM,M365, MITRE ATT&CK, GDPR, ISO 27001