IT Security Specialist

Mr Price Group; Durban; On-site; ZAR 600 000 - 800 000; Full time

Job summary

A leading retail company in Durban is looking for an analytical individual to join their technology security team. The role involves monitoring network security, designing security solutions, and training staff on best practices. Ideal candidates will have an IT degree and relevant certifications, along with experience in security operations and infrastructure support. Options for career development and a collaborative environment are provided.

Qualifications

• 3 years’ experience in a Security role.
• 5+ years in an Infrastructure Back-end support environment.
• Working knowledge of Networking and Directory Services through AD.
• Strong knowledge of Enterprise solutions and vulnerability management.
• Experience in the Security Operations Centre.

Responsibilities

• Define and advise on security standards.
• Monitor network activity for vulnerabilities.
• Design and configure security hardware and software.
• Train employees on security best practices.
• Perform security assessments and manage risks.

Skills

Analytical mind

Problem-solving ability

Strong communication skills

Organization skills

Team Player

Ability to work under pressure

Strong Decision-making skills

Education

Relevant IT degree

CompTIA Security+

CISSP

Microsoft Certified Systems Engineer

Microsoft Certified Azure Administrator

Associate of ISC

Google Certified Associate Engineer

AWS Certified Cloud Practitioner/Engineer

Tools

Security information and event management tools

Vulnerability management solutions

Email and collaboration tools

Intrusion Detection and Prevention software

Job description

We are looking to secure an analytical, team player to join our Mr Price technology security team!

A day in your life?

• Work with architects, system engineers and other IT support teams to define, guide, advise on security standards across the IT landscape, monitoring network activity to identify vulnerable points
• Design and configure security hardware and software
• Use the toolsets available to identify and detect intrusions on corporate network and endpoints; detect any unauthorized attempts to access the systems
• Solutionise by providing options for the IT network for enhancement to the security roadmap
• Train other employees on security best practices, mentoring to junior team members
• Monitor software and hardware for any possible cyber attacks
• Develops and implements new solutions based on a wide variety of different technologies; Evaluate new and possible vendors on security features to ensure they meet organizational security standards and policies
• Perform security assessments and conduct internal scanning on the network
• Analyze existing systems and make recommendations for changes or improvements
• Prepare reports, action plans and updating of the risk register
• Organize and conduct tests and “ethical hacks” of the existing company IT architecture
• Keep technical knowledge current through continuation of education
• Provide automation solutions as far as possible
• Serve as a security specialist and conduct training when required
• Draft policies, standard operating procedures and guidelines
• Prepare reports, action plans and updating of the risk register
• Be an active change advisory member by reviewing production changes
• Research and Design, benchmark, baseline exercises, trend analysis
• Align with enterprise’s security goals as established by its stated policies, procedures, and guidelines, and to actively work towards upholding those goals.

What we’re looking for in our new specialist?

Education & Certifications

Relevant IT degree and certifications in 1 or more of the following:

• CompTIA Security+
• CISSP
• Microsoft Certified Systems Engineer
• Microsoft Certified Azure Administrator
• Associate of ISC
• Google Certified Associate Engineer
• AWS Certified Cloud Practitioner/Engineer

Experience

• 3 years’ experience in a Security role
• 5+ years in an Infrastructure Back-end support environment and Implementation and deployment of enterprise solutions
• Working knowledge of Networking and Directory Services through AD
• Strong knowledge of Enterprise solutions; Vulnerability management, Edge/Cloud applications, M365 Backend Compliance and Policies, Google Workspace Threat intelligence, Web Filtering
• Essential understanding of the response required in a Security Operations Centre.
• Strong knowledge of design, test solutions, authentication methods, Windows, Apple & Linux operating systems, protocols, Data leakage, Mobile device management, endpoint, application, cloud solutions, identity and access management, penetration testing, web security, strong networking or Microsoft back-end experience.
• Strong understanding of the NIST and SANS framework would be advantageous.
• Experience in Governance (POPI/Data Protection/PCI/Policy and Procedure) is required. Knowledge of current security risks and protocols, creation of policy, procedure and standards documentation.
• Management of a Security information and event management environment
• Design, test, implementation and support of vulnerability management solutions, authentication methods, email and collaboration tools
• Protocols, Mobile device management, Intrusion Detection and Prevention software, network, perimeter, endpoint, application, cloud solutions, identity and access management, penetration testing
• Knowledge of current security risks and protocols, creation of policy, procedure and standards documentation.
• Cloud security and controls/Web Access Firewalls
• API security controls

• Soft Skills
• An analytical mind with excellent problem-solving ability
• Strong communication and organization skills
• Strong Decision-making skills
• High performance individual
• Ability to work under pressure
• Team Player with a great attitude;

The Mr Price Group is an equal opportunity employer and is committed to Employment Equity.