Cyber Security Engineer

THE SKILLS MINE; Cape Town; On-site; ZAR 500 000 - 700 000; Full time

Job summary

A cybersecurity firm in Cape Town is seeking an experienced cybersecurity professional to conduct technology reviews and lead compliance initiatives. The ideal candidate will have a Bachelor’s degree and relevant certifications, along with 3-6 years of experience in SOC environments. Responsibilities include developing cybersecurity policies and preparing compliance reports.

Qualifications

• Minimum 3 to 6 years of experience in cybersecurity operations or SOC.
• Certified Information Systems Auditor (CISA) and Certified Information Security Manager (CISM) required.

Responsibilities

• Conduct technology and cybersecurity reviews across the organisation.
• Design self-assessment frameworks for compliance.
• Lead PCI DSS compliance initiatives.
• Develop third-party risk assessment programs.
• Prepare compliance reports for management.

Skills

Cybersecurity operations

Cloud security platforms (AWS, Azure)

Endpoint security

Log analysis

AI and Data Analytics

Education

Bachelor’s degree in Cybersecurity, IT, Computer Science

Tools

NIST frameworks

ISO 27001

PCI DSS

Job description

Requirements

• A Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field
• A minimum of 3 to 6 years of experience in cybersecurity operations or SOC environments.
• Hands-on experience with cloud security platforms (AWS and Azure).
• Proven experience in endpoint security and log analysis.
• Certified Information Systems Auditor (CISA).
• Certified Information Security Manager (CISM).
• Strong understanding of cybersecurity frameworks, including NIST, ISO 27001, and PCI DSS.
• Actively involved in exploring industry trends to build future capabilities.
• Proficiency in AI and Data Analytics.

Certifications (Preferred)

• Security+ or an equivalent baseline security certification.
• Cloud security certifications (AWS Security Specialty, Azure Security Engineer).
• SOC analyst certifications (GCIH, GCFA, GNFA).
• Additional certifications such as CySA+, CISSP, or SANS training.

Responsibilities

• Conduct comprehensive technology and cybersecurity reviews across the organisation.
• Design and implement self-assessment frameworks for ongoing compliance monitoring.
• Lead PCI DSS compliance initiatives and manage assessment processes.
• Develop and maintain third-party risk assessment programs.
• Develop, review, and update cybersecurity policies and procedures.
• Prepare comprehensive compliance reports for management and stakeholders.