IT Security Specialist

Mr Price Group; Durban; On-site; ZAR 500 000 - 700 000; Full time

Job summary

A leading retail company in Durban is seeking a Security Specialist to enhance IT security standards. The ideal candidate should possess a relevant IT degree and multiple security certifications, coupled with 3+ years' experience in a security role and 5+ years in infrastructure support. Duties include monitoring network activities, designing security solutions, and training team members on security best practices. This role promises a dynamic, supportive team environment and growth opportunities in security management.

Qualifications

• 3 years’ experience in a Security role.
• 5+ years in an Infrastructure Back-end support environment.
• Working knowledge of Networking and Directory Services through AD.

Responsibilities

• Work with architects and system engineers to guide security standards.
• Design and configure security hardware and software.
• Monitor network activity to identify and respond to vulnerabilities.

Skills

Analytical thinking

Communication skills

Problem-solving

Team player attitude

Decision-making skills

Ability to work under pressure

Education

Relevant IT degree

CompTIA Security+

CISSP

Microsoft Certified Systems Engineer

Microsoft Certified Azure Administrator

AWS Certified Cloud Practitioner/Engineer

Job description

Overview

We are looking to secure an analytical, team player to join our Mr Price technology security team!

What we’re looking for in our new specialist?

Responsibilities

• Work with architects, system engineers and other IT support teams to define, guide, advise on security standards across the IT landscape, monitoring network activity to identify vulnerable points
• Design and configure security hardware and software
• Use the toolsets available to identify and detect intrusions on corporate network and endpoints; detect any unauthorized attempts to access the systems
• Solutionise by providing options for the IT network for enhancement to the security roadmap
• Train other employees on security best practices, mentoring to junior team members
• Monitor software and hardware for any possible cyber attacks
• Develops and implements new solutions based on a wide variety of different technologies; evaluate new and possible vendors on security features to ensure they meet organizational security standards and policies
• Perform security assessments and conduct internal scanning on the network
• Analyze existing systems and make recommendations for changes or improvements
• Prepare reports, action plans and updating of the risk register
• Organize and conduct tests and “ethical hacks” of the existing company IT architecture
• Keep technical knowledge current through continuation of education
• Provide automation solutions as far as possible
• Serve as a security specialist and conduct training when required
• Draft policies, standard operating procedures and guidelines
• Be an active change advisory member by reviewing production changes
• Research and design, benchmark, baseline exercises, trend analysis
• Align with enterprise’s security goals as established by its stated policies, procedures, and guidelines, and actively work towards upholding those goals

Education & Certifications

Relevant IT degree and certifications in 1 or more of the following:

• CompTIA Security+
• CISSP
• Microsoft Certified Systems Engineer
• Microsoft Certified Azure Administrator
• Associate of ISC
• Google Certified Associate Engineer
• AWS Certified Cloud Practitioner/Engineer

Experience

• 3 years’ experience in a Security role
• 5+ years in an Infrastructure Back-end support environment and Implementation and deployment of enterprise solutions
• Working knowledge of Networking and Directory Services through AD
• Strong knowledge of Enterprise solutions; Vulnerability management, Edge/Cloud applications, M365 Backend Compliance and Policies, Google Workspace Threat intelligence, Web Filtering
• Essential understanding of the response required in a Security Operations Centre
• Strong knowledge of design, test solutions, authentication methods, Windows, Apple & Linux operating systems, protocols, Data leakage, Mobile device management, endpoint, application, cloud solutions, identity and access management, penetration testing, web security, strong networking or Microsoft back-end experience
• Strong understanding of the NIST and SANS framework would be advantageous
• Experience in Governance (POPI/Data Protection/PCI/Policy and Procedure) is required. Knowledge of current security risks and protocols, creation of policy, procedure and standards documentation
• Management of a Security information and event management environment
• Design, test, implementation and support of vulnerability management solutions, authentication methods, email and collaboration tools
• Protocols, Mobile device management, Intrusion Detection and Prevention software, network, perimeter, endpoint, application, cloud solutions, identity and access management, penetration testing
• Knowledge of current security risks and protocols, creation of policy, procedure and standards documentation
• Cloud security and controls/Web Access Firewalls
• API security controls

• Soft Skills
• An analytical mind with excellent problem-solving ability
• Strong communication and organization skills
• Strong Decision-making skills
• High performance individual
• Ability to work under pressure
• Team Player with a great attitude

The Mr Price Group is an equal opportunity employer and is committed to Employment Equity.