Cybersecurity Engineer

Herotel 5F74Feffb7E1; Parow; On-site; ZAR 420,000 - 660,000; Full time

Benefits offered by this job

Exposure to dynamic workplace

Internal academy

Friendly team-driven environment

Group Risk Benefits

Medical Benefits

Health and Lifestyle Programmes

Job summary

Herotel in Plattekloof is seeking a Cybersecurity Engineer to own day-to-day security operations, from monitoring to incident response and vulnerability management.

You will work with the IT team to strengthen infrastructure security, perform penetration testing, manage SIEM and endpoint protection, and help implement ISO 27001 controls while supporting POPIA compliance.

Qualifications

• Diploma or degree in CS/IT/Cybersecurity or related field.
• 3–5 years hands-on cybersecurity engineering or SOC/IT security experience.
• Experience with security monitoring, incident response, and vulnerability management.
• Experience with endpoint protection platforms, SIEM, and security tooling.
• Cloud security exposure (Azure, AWS, GCP) and MITRE ATT&CK familiarity.
• Windows OS, Entra ID/Azure AD, and networking fundamentals.
• Knowledge of firewalls, networks, and security architecture.
• Desirable certifications: CompTIA Security+, Microsoft SC-200 or AZ-500, CEH; CISSP/CISM advantageous.

Responsibilities

• Monitor systems and networks for security threats.
• Investigate and respond to incidents and alerts in real time.
• Manage endpoint protection platforms and security tooling.
• Develop and maintain incident response plans.
• Lead vulnerability scans across infrastructure and apps.
• Perform annual penetration tests including social engineering.
• Collaborate with IT to remediate risks.
• Review and harden server configurations; support cloud/on-prem.
• Assist with ISO 27001 controls in audits.
• Support POPIA incident response with forensics.

Skills

Security monitoring

Incident response

Vulnerability management

Endpoint security

SIEM platforms

Cloud security

MITRE ATT&CK

Windows & Entra ID

Networking basics

Python scripting

Education

Diploma or Degree in Computer Science, Information Technology, Cybersecurity, or related field

Tools

Endpoint protection

SIEM systems

Security tooling

Azure

AWS

GCP

Firewall concepts

Penetration testing basics

Job description

Are you a sharp, detail driven cybersecurity professional who thrives on staying ahead of threats before they land? Join our Information Technology team as a Cybersecurity Engineer in Plattekloof, where you'll take hands on ownership of Herotel's day to day security operations, from monitoring and incident response to vulnerability management and infrastructure hardening.

This role is perfect for someone who is calm under pressure, curious by nature, and wants to build a career at the sharp end of a fast growing internet service provider's security programme.

What you'll do:

• Monitor systems and networks for suspicious activity and security threats
• Investigate and respond to security incidents and alerts in real time, performing root cause analysis and documenting findings
• Manage and maintain the endpoint protection platform and security tooling (SIEM, SOC systems)
• Develop, implement, and maintain comprehensive incident response plans
• Manage real time information security incidents to minimise operational business impact and maximise service availability
• Conduct regular vulnerability scans and assessments across infrastructure and applications
• Perform auditable, proactive application and network penetration tests at least annually, including social engineering assessments
• Track remediation progress and collaborate with infrastructure and IT teams to resolve identified risks
• Review and harden server and infrastructure security configurations on an ongoing basis, contributing to hardening across cloud and on premises environments
• Maintain and test disaster recovery and backup verification procedures with the infrastructure team, including regular DR simulations
• Review new projects and system changes with IT and project teams to ensure they meet information security requirements before go live
• Research and evaluate security vendors, products, and tooling to ensure robust detection, prevention, and monitoring capability
• Implement and operate ISO 27001 Annex A technical controls in partnership with the GRC Officer, and provide control evidence for internal and certification audits
• Support POPIA incident response with technical investigation, containment, and forensic evidence gathering

What you'll need:

• Diploma or Degree in Computer Science, Information Technology, Cybersecurity, or a related field
• 3 to 5 years of hands on experience in cybersecurity engineering, SOC, or IT security roles
• Proven experience in security monitoring, incident response, and vulnerability management
• Experience managing endpoint protection platforms, SIEM systems, and security tooling
• Exposure to cloud environments (Azure, AWS, GCP) and cloud security practices
• Familiarity with threat frameworks such as MITRE ATT&CK
• Proficiency in Windows OS, Entra ID/Azure AD, and networking fundamentals (TCP/IP, DNS, DHCP)
• Knowledge of firewalls, networks, and security architecture
• Scripting experience (BASH, Python) is advantageous
• Working knowledge of ISP operations and procedures is advantageous
• Desirable certifications: CompTIA Security+, Microsoft SC 200 (Security Operations Analyst) or AZ 500 (Azure Security Engineer), CEH (Certified Ethical Hacker); CISSP or CISM advantageous as a growth path

What we offer:

• Exposure to a dynamic workplace
• A chance to grow your skills through our internal academy
• A friendly, team-driven environment
• Group Risk Benefits
• Medical Benefits
• Health and Lifestyle Programmes

Important Disclaimer:

• Please ensure that the information you provide in your application is true, accurate, and correct.
• Preference will be given to candidates from Designated Groups, as defined by the Employment Equity Act and in line with Herotel's Employment Equity Plan.
• By submitting an application, you consent to the processing of your personal information in accordance with POPIA for recruitment purposes. For more details on how we handle personal information, please refer to our Privacy Policy on our website.
• If you do not hear from us within 14 days, please consider your application unsuccessful.