Cybersecurity Engineer — Incident Response & Cloud Security

Herotel; Cape Town; On-site; ZAR 600,000 - 900,000; Full time

Benefits offered by this job

Group Risk Benefits

Medical Benefits

Health and Lifestyle Programmes

Internal academy

Job summary

Herotel is seeking a Cybersecurity Engineer for its Information Technology team in Plattekloof, Western Cape. You will own daily security operations, from monitoring to incident response, vulnerability management and infrastructure hardening.

This role suits a calm, curious professional who wants to build a career in a fast-growing internet service provider's security programme, with a focus on ISO 27001 control implementation and POPIA compliance.

Qualifications

• Diploma or degree in CS/IT/Cybersecurity or related field.
• 3–5 years hands-on cybersecurity engineering or SOC/IT security.
• Experience in security monitoring, incident response, and vulnerability management.
• Experience managing endpoint protection platforms, SIEM, and security tooling.
• Exposure to cloud environments (Azure, AWS, GCP) and cloud security practices.
• Familiarity with MITRE ATT&CK framework.
• Proficiency with Windows OS, Entra ID/Azure AD, and networking basics.
• Knowledge of firewalls, networks, and security architecture.
• Scripting experience (Bash, Python).

Responsibilities

• Monitor systems and networks for security threats.
• Investigate and respond to real-time security incidents and alerts; perform root cause analysis.
• Manage the endpoint protection platform and security tooling (SIEM, SOC).
• Develop, implement, and maintain incident response plans.
• Coordinate remediation with IT and infrastructure teams to resolve risks.
• Conduct vulnerability scans across infrastructure and applications.
• Perform annual penetration tests including social engineering.
• Review and harden server/network configurations continuously.

Skills

Cybersecurity engineering

Security monitoring

Incident response

Vulnerability management

Endpoint protection

SIEM systems

Cloud security

MITRE ATT&CK

Networking fundamentals

Windows OS

Azure AD / Entra ID

Bash / Python

Education

Diploma or Degree in Computer Science/IT/Cybersecurity

Tools

Azure

AWS

GCP

SIEM

Firewall tooling

Job description

Herotel is seeking a Cybersecurity Engineer for its Information Technology team in Plattekloof, Western Cape. You will own daily security operations, from monitoring to incident response, vulnerability management and infrastructure hardening.

This role suits a calm, curious professional who wants to build a career in a fast-growing internet service provider's security programme, with a focus on ISO 27001 control implementation and POPIA compliance.