IT Security Specialist Engineer (Cloud) Mr Price Group

Mr Price Group; Durban; On-site; ZAR 300 000 - 400 000; Full time

Job summary

A leading retail company in Durban is seeking a Security Specialist to enhance their IT security landscape. The ideal candidate should have a relevant IT degree, 3 years in a security role, and 5+ years in infrastructure support. Responsibilities include monitoring network activities, designing security solutions, conducting assessments, and training staff. This is an opportunity to join a forward-thinking team dedicated to protecting assets and maintaining compliance with security standards.

Qualifications

• 3 years’ experience in a Security role.
• 5+ years in Infrastructure Back-end support environment.
• Working knowledge of Networking and Directory Services through AD.
• Strong knowledge of cloud applications and M365 Backend Compliance.
• Understanding of Security Operations Centre responses.

Responsibilities

• Work with IT teams to define security standards.
• Design and configure security hardware and software.
• Identify and detect network intrusions.
• Conduct internal scanning and security assessments.
• Draft security policies and guidelines.

Skills

Analytical thinking

Problem-solving

Communication

Teamwork

Organization

Education

Relevant IT degree

CompTIA Security+

CISSP

Associate of ISC

Tools

Vulnerability management tools

Intrusion Detection and Prevention Software

Security Information and Event Management tools

Cloud security tools

API security controls

Job description

Job Description

We are looking to secure an analytical, team player to join our Mr Price technology security team!

Responsibilities

• Work with architects, system engineersand other IT support teams to define, guide, advise on security standards across the IT landscape, monitoring network activity to identify vulnerable points
• Design and configure security hardware and software
• Use the toolsets available to identify and detect intrusions on corporate network and endpoints; detect any unauthorized attempts to access the systems
• Solutionise by providing options for the IT network for enhancement to the security roadmap
• Train other employees on security best practices, mentoring to junior team members
• Monitor software and hardware for any possible cyber attacks
• Develops and implements new solutions based on a wide variety of different technologies; Evaluate new and possible vendors on security features to ensure they meet organizational security standards and policies
• Perform security assessments and conduct internal scanning on the network
• Analyze existing systems and make recommendations for changes or improvements
• Prepare reports, action plans and updating of the risk register
• Organize and conduct tests and “ethical hacks” of the existing company IT architecture
• Keep technical knowledge current through continuation of education
• Provide automation solutions as far as possible
• Serve as a security specialist and conduct training when required
• Draft policies, standard operating procedures and guidelines
• Prepare reports, action plans and updating of the risk register
• Be an active change advisory member by reviewing production changes
• Research and Design, benchmark, baseline exercises, trend analysis
• Align with enterprise’s security goals as established by its stated policies, procedures, and guidelines, and to actively work towards upholding those goals.

Qualifications

Education & Certifications

Relevant IT degree and certifications in 1 or more of the following:

• CompTIA Security+
• CISSP
• Associate of ISC

Experience

• 3 years’ experience in a Security role
• 5+ years in an Infrastructure Back-end support environment and Implementation and deployment of enterprise solutions
• Working knowledge of Networking and Directory Services through AD
• Strong knowledge of Enterprise solutions; Vulnerability management, Edge/Cloud applications, M365 Backend Compliance and Policies, Google Workspace Threat intelligence, Web Filtering
• Essential understanding of the response required in a Security Operations Centre.
• Strong knowledge of design, test solutions, authentication methods, Windows, Apple & Linux operating systems, protocols, Data leakage, Mobile device management, endpoint, application, cloud solutions, identity and access management, penetration testing, web security, strong networking or Microsoft back-end experience.
• Strong understanding of the NIST and SANS framework would be advantageous.
• Experience in Governance (POPI/Data Protection/PCI/Policy and Procedure) is required. Knowledge of current security risks and protocols, creation of policy, procedure and standards documentation.
• Management of a Security information and event management environment
• Design, test, implementation and support of vulnerability management solutions, authentication methods, email and collaboration tools
• Protocols, Mobile device management, Intrusion Detection and Prevention software, network, perimeter, endpoint, application, cloud solutions, identity and access management, penetration testing
• Knowledge of current security risks and protocols, creation of policy, procedure and standards documentation.
• Cloud security and controls/Web Access Firewalls
• API security controls

Soft Skills

• An analytical mind with excellent problem-solving ability
• Strong communication and organization skills
• High performance individual
• Ability to work under pressure
• Team Player with a great attitude

Mr Price Group Limited is an equal opportunity employer and is committed to Employment Equity.