Cybersecurity Engineer

Datacentrix; Cape Town; On-site; ZAR 420,000 - 650,000; Full time

Job summary

Datacentrix Cape Town is seeking a Cybersecurity Engineer to join our IT security team. The role requires 3–5 years of hands-on experience in IT infrastructure, systems administration, or cybersecurity, with strong expertise in Windows Server, Active Directory, Entra ID (Azure AD) and Microsoft 365 security technologies.

You will deploy and manage security solutions (EDR/XDR, SIEM, IAM), monitor threats, conduct vulnerability assessments, and participate in incident response, patching, and

Qualifications

• Matric and relevant IT certification or equivalent training.
• 3–5 years in cybersecurity, IT infrastructure or systems administration.
• Hands-on experience implementing security solutions (firewalls, EDR/XDR, SIEM, IAM).
• Working knowledge of Azure cloud and security principles.
• Experience with Microsoft 365 administration and security technologies.
• Exposure to incident response, vulnerability management and patching.

Responsibilities

• Deploy and maintain security technologies across networks, endpoints, cloud, and apps.
• Administer Firewalls, EDR/XDR, SIEM, IAM, and DLP tools.
• Perform system hardening and ensure controls are properly configured.
• Monitor threats, investigate incidents, and drive remediation actions.
• Lead vulnerability assessments and patch management efforts.
• Support ISO 27001, NIST, CIS controls and POPIA compliance initiatives.
• Collaborate with IT Operations, Cloud and App teams; share security guidance.

Skills

Cybersecurity Engineering

EDR/XDR

SIEM

IAM

Security Monitoring

Incident Response

Vulnerability Management

Microsoft Azure

Azure AD / Entra ID

Microsoft 365 Security

Firewalls

Threat Detection

Patch Management

System Hardening

Active Directory

DNS / DHCP

Windows Server

Education

Matric

IT Certification

Tools

Windows Server

Active Directory

Group Policy

DNS

DHCP

Azure AD

Microsoft 365

Job description

Datacentrix Cape Town is looking for a Cybersecurity Engineer with 3-5 years' experience in IT infrastructure, systems administration, or cybersecurity. The ideal candidate must have hands-on experience in Microsoft Windows Server, Active Directory, Group Policy, DNS, DHCP, Microsoft Entra ID (Azure AD) and Microsoft 365 administration and security technologies. The role requires practical experience or exposure to security solutions such as firewalls, EDR/XDR, SIEM, and IAM, as well as security monitoring, incident response, vulnerability management, Microsoft Azure, cloud security principles, patch management, and system hardening.

Requirements:

• Matric and relevant tertiary/certification in IT
• 3-5 years' experience in cybersecurity, IT infrastructure and systems administration
• Experience implementing and supporting security solutions such as firewalls, EDR/XDR, SIEM, and IAM.
• Working knowledge of Microsoft Azure and cloud security principles.
• Experience with Microsoft 365 administration and security technologies.
• Exposure to security monitoring, incident response, and vulnerability management.
• Hands-on experience administering and securing Microsoft Windows Server environments.
• Experience with Active Directory, Group Policy, DNS, DHCP, and Microsoft Entra ID (Azure AD).

Desired – Not Mandatory Certifications:

• Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900)
• Microsoft Certified: Information Security Administrator Associate (SC-401)
• MCSE: Core Infrastructure/ MCSA Windows Server 2016
• Microsoft Certified: Windows Server Hybrid Administrator Associate
• Microsoft 365 Certified: Endpoint Administrator Associate
• Fortinet NSE4
• CC Cybersecurity
• CompTIA Security+
• CySA (CompTIA Cybersecurity Analyst)

Overall Responsibilities:

Security Engineering & Implementation

• Deploy, configure, and maintain security technologies across network, endpoint, cloud, and application environments.
• Administer security tools such as Firewalls, IDS/IPS, EDR/XDR, SIEM, IAM, and DLP solutions.
• Perform system hardening in line with security standards and best practices.
• Ensure security controls remain operational, effective, and appropriately configured.

Security Monitoring & Threat Management

• Monitor security environments for suspicious activity and potential threats.
• Analyze logs, alerts, and events using SIEM and other monitoring tools.

Vulnerability & Risk Management

• Conduct vulnerability scans and assessments.
• Assist with penetration testing activities and remediation planning.
• Track vulnerabilities through to closure.
• Support patch management and system remediation efforts.

Incident Response & Recovery

• Participate in incident investigation, containment, eradication, and recovery activities.
• Execute incident response procedures and playbooks
• Assist in root cause analysis and post-incident reviews.
• Maintain incident documentation and evidence.

Compliance & Governance

• Support compliance initiatives relating to ISO 27001, NIST, CIS Controls, POPIA, and other applicable frameworks.
• Assist with audits and compliance assessments.
• Maintain security documentation, standards, procedures, and records.
• Monitor adherence to security policies and standards.

Stakeholder Engagement

• Work closely with IT Operations, Infrastructure, Cloud, and Application teams.
• Communicate technical findings and recommendations effectively.
• Provide security guidance and awareness support to internal stakeholders.
• Contribute to knowledge sharing and continuous improvement initiatives