Manager - Security Engineer Incident Management and Automation

MTN; Roodepoort; On-site; ZAR 900,000 - 1,600,000; Full time

Job summary

MTN Group is seeking a Manager - Security Engineering, Incident Management and Automation to bolster its Cyber Defence capabilities. The role focuses on security engineering, incident management, monitoring and automation across SIEM, SOAR, EDR/XDR, and cloud security.

You will partner with MTN entities and vendors on strategic cyber initiatives. Ideal candidates possess a 4–6 year track record in information security, cloud security, and security automation, with strong scripting skills and a

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Engineering, Cybersecurity or a related field.
• One or more relevant industry certifications (as per below)

Responsibilities

• Strengthen MTN's Cyber Defence capabilities through security engineering, incident management, monitoring and automation.
• Drive technical effectiveness and optimization of SOC technologies and capabilities, including SIEM, SOAR, EDR/XDR, NDR, email and cloud security.
• Collaborate with MTN entities, technology teams, MSS providers and vendors on design and delivery of Cyber Defence projects and new security capabilities.

Skills

Security Monitoring

Incident Response

Security Operations

Security Tool Administration

Python

PowerShell

KQL

REST APIs

Cloud Security

Azure/AWS/GCP

MITRE ATT&CK

Team Leadership

Stakeholder Engagement

Education

Bachelor's degree in Computer Science, Information Technology, Engineering, Cybersecurity or related field

One or more relevant industry certifications

Tools

Microsoft Sentinel

Splunk

SOAR

EDR/XDR (Microsoft Defender)

Job description

We at MTN Group are a purpose and value led organization.

At MTN Group, we believe that understanding our people’s needs and aspirations is key to creating experiences that delight you at work, everyday. We are committed to fostering an environment where every member of our Y'ello Family is heard, understood and empowered to live an inspired life.

Our values keep us grounded and moving in the right direction. Most importantly, they keep us honest. It is not something we claim to be. It is in our DNA.

As an organisation, we consider it our mission to create an exciting and rewarding place to work, where our people can be themselves, thrive in positivity and ignite their full potential. A workplace that boosts creativity and innovation, improves productivity, and ultimately drives meaningful results. A workplace that is built on relationships and achieving a purpose that is bigger than us. This is what we want you to experience with us!

Our commitments go beyond an organisational promise. It is in our leadership and managerial ethos to meaningfully partner with our employees, customers and stakeholders with a vision to realise our shared goals.

We are delighted that you are considering us as your career partner to make a mark in the world.

About the Role:

As the Manager - Security Engineering, Incident Management and Automation, you will play a key role in strengthening MTN's Cyber Defence capabilities through the implementation, operation and continuous improvement of security engineering, incident management, monitoring and automation solutions. You will drive the technical effectiveness and optimisation of Security Operations Centre technologies and capabilities, including SIEM, SOAR, EDR/XDR, NDR, email and cloud security, while enhancing security monitoring, threat detection and incident response across MTN.

Working closely with MTN entities, technology teams, MSS providers and vendors, you will support the design and delivery of Cyber Defence projects and new security capabilities while ensuring alignment with approved security standards, architectural principles, risk requirements and regulatory obligations. Through performance reporting, continuous improvement and technical input into strategic roadmaps, you will help strengthen MTN's detection, response and operational resilience capabilities and ensure the SOC continues to evolve in line with changing business and threat environments.

Key Responsibilities:

• Security Operations
• AI, Automation & Security Engineering
• Security Project Delivery & Engineering

What We're Looking For:

Education:

• Bachelor's degree in Computer Science, Information Technology, Engineering, Cybersecurity or a related field (or equivalent practical experience).
• One or more relevant industry certifications (as per below)

Certifications:

• CISSP, CISM or equivalent security certification advantageous
• GIAC certifications (e.g. GCIA, GCIH, GMON, GPEN) or OSCP / CEH.
• Microsoft Security certifications (SC-200, AZ-500).
• Cloud security certifications (CCSP, AWS or Azure security specialty).

Experience:

• 4-6 years' experience in information security, cybersecurity operations or a related technology environment.
• Experience in the following areas: Security Monitoring, Incident Response, Security Operations, or Security Tool Administration.
• Experience supporting the implementation and operation of security automation solutions within enterprise environments
• Experience operating in large, complex enterprise environments; telecommunications experience is an advantage.
• Strong knowledge of SIEM and SOAR platforms (e.g. Microsoft Sentinel, Splunk) and EDR/XDR tooling (e.g. Microsoft Defender).
• Proficiency in scripting and automation (Python, PowerShell, KQL) and integration via REST APIs.
• Practical knowledge of cloud security across Azure, AWS and/or GCP.
• Familiarity with AI/ML and LLM security concepts, agentic AI, and secure AI adoption.
• Working knowledge of security frameworks: MITRE ATT&CK, MITRE ATLAS, NIST CSF, OWASP, Zero Trust and CIS.
• Sound understanding of networking, operating systems and enterprise infrastructure.
• Analytical, structured problem-solver with strong attention to detail.
• Self-driven and able to work independently and lead initiatives end-to-end.
• Strong collaboration and stakeholder engagement skills across technical and business teams.
• Comfortable with ambiguity and a rapidly evolving technology landscape.
• Committed to continuous learning, innovation and knowledge sharing.

If you're passionate about staying ahead of evolving cyber threats, transforming security operations through AI and automation, and engineering stronger detection and response capabilities, this is your opportunity.

Join us in shaping the future of Cyber Defence at MTN Group, driving innovation across security engineering, incident management and automation while strengthening the technologies and capabilities that enable faster detection, smarter response and greater operational resilience.

Closing date: 09 November 2026. Late applications will not be accepted.

Disclaimer:

MTN Group is an equal opportunity employer with an imperative and obligation to achieve its own set EE targets and the legislated Employment Equity targets. Preference will first be given to previously disadvantaged individuals/groups with a specific focus on females and differently abled persons.

If you have not heard from us within 14 days of closure of this job advert, then you can assume your application has been unsuccessful.