Remote Senior Information Security Engineer - Incident Response

Placements24; LegKraal Gate; Hybrid; ZAR 900,000 - 1,600,000; Full time

Benefits offered by this job

Health insurance

Retirement fund

Performance-based bonuses

Professional development

Job summary

Placements24 is seeking a Senior Information Security Engineer (Incident Response) to lead responses to security incidents from a remote location within South Africa. You will conduct forensic investigations, refine IR playbooks, and collaborate with threat intel and IT teams to ensure rapid containment and recovery.

The ideal candidate brings 6+ years in information security, with 4+ years in IR/forensics, and hands-on experience with SIEM/EDR, scripting, and modern forensic tools.

Qualifications

• Minimum six years in information security with four+ years in IR and forensics.
• Experience leading IR for complex security incidents.
• Familiarity with forensic tools and methodologies; strong technical acumen.

Responsibilities

• Lead end-to-end incident response for breaches and cyber events.
• Develop and test comprehensive incident response plans and playbooks.
• Perform in-depth forensic analysis, log/memory/disk investigations.
• Identify threats, vulnerabilities, and attack vectors and report findings.
• Contain, eradicate and recover from incidents in a timely manner.
• Collaborate with threat intel, SOC and IT teams; mentor juniors.
• Develop automation for IR tasks; conduct post-incident reviews.
• Stay current on TTPs and evolving threat landscapes.

Skills

Incident Response

Digital Forensics

Threat Analysis

Scripting (Python/PowerShell)

Security Tools (SIEM/EDR)

Communication

Mentorship

Education

Bachelor's degree in CS/C cybersecurity

Tools

EnCase

FTK

Volatility

SIFT Workstation

Splunk

ELK

Job description

About the Role

Our client, a fast-growing fintech company, is seeking a highly skilled Senior Information Security Engineer with a specialization in Incident Response to join their team. This is a fully remote position, allowing you to work from anywhere within South Africa . You will play a critical role in defending the organization against cyber threats by leading the response to security incidents, analyzing sophisticated attacks, and implementing measures to prevent future breaches. This includes developing and refining incident response plans, conducting forensic investigations, and collaborating with various teams to ensure rapid and effective containment and recovery. We are looking for a seasoned professional with a deep understanding of threat landscapes, incident handling methodologies, and a passion for protecting digital assets in a high-stakes environment. This is an exceptional opportunity to contribute to the security of a cutting-edge technology firm from your home office.

Key Responsibilities

• Lead and manage the end-to-end incident response process for security breaches and cyber events.
• Develop, test, and maintain comprehensive incident response plans and playbooks.
• Perform in-depth forensic analysis of security incidents, including log analysis, memory forensics, and disk imaging.
• Identify, analyze, and report on threats, vulnerabilities, and attack vectors.
• Contain, eradicate, and recover from security incidents in a timely and effective manner.
• Collaborate closely with threat intelligence, security operations, and IT teams.
• Provide expert technical guidance and mentorship to junior incident responders.
• Develop and implement automation for incident response tasks.
• Conduct post-incident reviews and provide recommendations for security improvements.
• Stay abreast of the latest threat actor tactics, techniques, and procedures (TTPs).

Requirements

• Bachelor's degree in Computer Science, Cybersecurity, or a related field, or equivalent extensive experience.
• Minimum of 6 years of progressive experience in information security, with at least 4 years focused on incident response and digital forensics.
• Proven experience leading incident response efforts for complex security incidents.
• Expertise in forensic tools and techniques (e.g., EnCase, FTK, Volatility, SIFT Workstation).
• Strong knowledge of network protocols, operating systems (Windows, Linux, macOS), and security technologies.
• Experience with SIEM platforms (e.g., Splunk, ELK) and EDR solutions.
• Proficiency in scripting languages such as Python or PowerShell for automation.
• Excellent analytical, problem-solving, and decision-making skills under pressure.
• Exceptional communication and interpersonal skills, with the ability to clearly articulate technical details to both technical and non-technical audiences.
• Relevant certifications such as GCFE, GCFA, GCIH, CISSP-ISSAP are highly desirable.
• Must be legally authorized to work remotely in South Africa .

Benefits

• This fully remote position offers a highly competitive salary, comprehensive health insurance, a generous retirement fund, and performance-based bonuses.
• Our client provides extensive opportunities for professional development, including advanced training, certifications, and attendance at leading cybersecurity conferences.
• You will have the flexibility to work from home, enjoying an excellent work-life balance and eliminating commute time.
• Regular virtual team meetings and collaborative platforms ensure strong communication and teamwork.
• Our client fosters a culture of innovation and continuous learning, offering significant career advancement opportunities within their dynamic security team.
• Additional benefits include access to cutting-edge security tools and resources, and a supportive remote work environment.
• The company values employee well-being and provides resources to support mental and physical health.