IT Security Administrator (CH1305)

Capital H Staffing and Advisory Solutions; Cape Town; On-site; ZAR 360,000 - 540,000; Full time

Job summary

Capital H Staffing and Advisory Solutions in Cape Town seeks a hands-on IT Security Administrator to join the Cyber Security and IT Infrastructure team. You will administer Defender security technologies, investigate incidents, manage vulnerabilities and strengthen overall security posture.

The role is operational and technically focused, requiring practical experience with Microsoft Defender for Endpoint, Defender XDR, Intune and Entra ID, in a full-time, office-based setting in South Africa.

Qualifications

• 3–5 years' relevant experience in IT Security or related infrastructure security role.
• Hands-on experience administering Defender security technologies, especially Defender for Endpoint and Defender XDR.
• Experience in endpoint security and EDR, plus investigating security alerts and vulnerabilities.
• Strong knowledge of Windows environments, Microsoft 365, and identity security (Active Directory, Entra ID).
• Understanding of networking fundamentals and vulnerability remediation.

Responsibilities

• Administer, monitor and optimise Defender and related Microsoft security technologies.
• Monitor, investigate and respond to security alerts and incidents with proper escalation.
• Identify and remediate vulnerabilities from scanning, pen-testing and assessments.
• Support endpoint, identity and Microsoft 365 security controls (Intune, Entra ID).
• Coordinate third‑party cyber security risk assessments and remediation tracking.
• Assist with design, implementation and ongoing support of IT security solutions.
• Support security awareness initiatives, documentation and reporting.
• Review and enforce IT and cyber security policies.
• Collaborate with Cyber Security and IT Infrastructure teams to improve processes and controls.

Skills

IT Security

EDR

Windows Administration

Incident Response

Vulnerability Management

Networking basics

Security policies

Education

IT/Cyber Security qualification

Microsoft Security Certifications

CompTIA Security+

Tools

Defender Endpoint

Defender XDR

Intune

Entra ID

Microsoft 365

Job description

Our client, an established organisation in the financial services sector, is seeking a hands‑on IT Security Administrator to join its Cyber Security and IT Infrastructure team.

The successful candidate will be responsible for administering and monitoring security technologies, investigating security incidents, managing vulnerabilities and strengthening the organisation's overall security posture.

This is an operational, technically focused role requiring practical experience with Microsoft

Defender security technologies, particularly Microsoft Defender for Endpoint and Defender XDR.

Key Responsibilities

• Administer, monitor and optimise Microsoft Defender and related Microsoft security technologies.

• Monitor, investigate and respond to security alerts and incidents, ensuring appropriate escalation and remediation.

• Identify, investigate and coordinate the remediation of security vulnerabilities identified through scanning, penetration testing and security assessments.

• Support endpoint, identity and Microsoft 365 security controls, including Microsoft Intune and Microsoft Entra ID.

• Coordinate third-party cyber security risk assessments and track remediation activities.

• Assist with the analysis, design and implementation of IT security solutions and supporting infrastructure.

• Support security awareness initiatives, operational documentation and security reporting.

• Assist with reviewing, implementing and enforcing IT and cyber security policies.

• Collaborate with Cyber Security and IT Infrastructure teams to continuously improve security processes and controls.

Requirements

Essential:

• 3--5 years' relevant experience in IT Security, Cyber Security or a related IT Infrastructure security role.

• Practical, hands‑on experience administering and operating Microsoft Defender security technologies, particularly Defender for Endpoint and Defender XDR.

• Experience in endpoint security and Endpoint Detection and Response (EDR).

• Experience investigating security alerts, incidents and vulnerabilities.

• Strong working knowledge of Microsoft Windows environments, Microsoft 365 and endpoint administration.

• Understanding of Active Directory, Microsoft Entra ID and identity security.

• Knowledge of networking fundamentals, including TCP/IP, DNS and DHCP.

• Understanding of vulnerability assessments, penetration-testing concepts and security remediation.

• Ability to troubleshoot security issues and coordinate resolution across technical teams.

Highly Advantageous:

• Microsoft Defender for Endpoint and Defender XDR.

• Microsoft Defender for Office 365 and Defender for Identity.

• Microsoft Intune and endpoint security controls.

• Microsoft Sentinel.

• Microsoft Entra ID security administration.

• Experience with third‑party cyber security risk assessments.

• Experience supporting security policies, compliance and awareness initiatives.

Qualifications & Certifications

• A relevant qualification in Information Technology, Cyber Security, Information Security or a related field will be advantageous.

• Relevant industry certifications will also be beneficial, including:

  • Microsoft Security Certifications

  • CompTIA Security+, Network+ or PenTest+

  • ISC2 Certified in Cybersecurity (CC)

  • ISC2 Systems Security Certified Practitioner (SSCP)

Equivalent practical experience and other recognised cyber security certifications will also be considered.

Personal Attributes

• Analytical, methodical and detail oriented.

• Strong troubleshooting and problem‑solving abilities.

• Proactive, with the ability to take ownership of security incidents through to resolution.

• Comfortable working across cyber security and IT infrastructure environments.

• Effective communication skills with technical and non‑technical stakeholders.

• Committed to continuous learning and keeping up with evolving cyber security threats and technologies.

Additional Information

The position is full‑time and office‑based, in either Claremont, Cape Town or Lynnwood, Pretoria.

Occasional after‑hours work will be required.

General:

• We are committed to fair and inclusive hiring. All suitably qualified applicants are welcome to apply.

• Preference may be given in line with our client's Employment Equity plan and applicable legislation.

• Applicants must have the legal right to work in South Africa at the time of application.