Cyber Security Engineer — Infra & AppSec Expert

Boardroom Appointments; Johannesburg; On-site; ZAR 600,000 - 900,000; Full time

Job summary

Boardroom Appointments is seeking a security professional to analyze information and identify gaps across infrastructure and applications. You will advise on threats, prioritize remediation, and help eliminate false positives while collaborating on architecture reviews.

Responsibilities include documenting findings, guiding patches, expanding automation, and coordinating with the global security team to strengthen controls across cloud and on-prem environments.

Qualifications

• Strong analytical skills with cross-functional knowledge across security platforms and infrastructure.
• Deep knowledge of infrastructure security architectures, vulnerabilities and controls (AD, AAD, cloud IaaS/PaaS, network).
• Deep knowledge of application security vulnerabilities, testing techniques, and OWASP.
• Experience using security tools across infrastructure and applications (SIEM, EDR, threat hunting, vulnerability exploitation, IAM, PAM).
• Proficient in security penetration for Microsoft environments (on-prem and cloud).
• Experience with Microsoft Security Stack (Defender, Sentinel, ESM).
• PowerShell & API scripting; Python, C++, or KQL advantageous.
• Experience in penetration testing and simulating security events for testing infrastructure and apps.
• Ability to articulate vulnerabilities and risks to business in clear terms.
• Knowledge of NIST and IEC 62443 frameworks.
• Strong investigation and postmortem analysis skills; discuss root causes.
• Strong written and verbal communication; good problem-solving.

Responsibilities

• Analyze information to identify security gaps impacting posture.
• Provide advice on application and infrastructure threats and remediation.
• Prioritize vulnerability results; guide remediation and reduce false positives.
• Attend design/app architecture reviews and lead security discussions.
• Document findings and recommendations; assist teams with patches and remediation.
• Enhance controls across compute environments (private/public cloud, IaaS, PaaS, SaaS).
• Expand automation in securing environments across platforms.
• Interface between local business unit and global security team.

Skills

Analytical skills

Cross-functional knowledge

Security platforms

Infrastructure disciplines

Active Directory/AAD

Cloud security

Vulnerability testing

Penetration testing

Security tooling

PowerShell scripting

Python scripting

Communication skills

Tools

SIEM

EDR

Threat Hunting

Vulnerability management

IAM/PAM

Job description

Boardroom Appointments is seeking a security professional to analyze information and identify gaps across infrastructure and applications. You will advise on threats, prioritize remediation, and help eliminate false positives while collaborating on architecture reviews.

Responsibilities include documenting findings, guiding patches, expanding automation, and coordinating with the global security team to strengthen controls across cloud and on-prem environments.