Security Defence and Operations Lead

Network Finance; Randburg; On-site; ZAR 900,000 - 1,500,000; Full time

Job summary

Network Finance seeks a Security Defence and Operations Lead to oversee the operational defence of its digital environment. You will drive incident response, vulnerability management, security operations, and the optimisation of critical security controls across the business.

You will collaborate with internal tech teams, security providers and business stakeholders to identify, contain and remediate cyber threats, while enhancing security processes and proactive risk reduction in a fast-paced

Qualifications

• Bachelor's Degree in Information Security, Computer Science, Information Technology, or a related field.
• CISSP, GCIH, CEH, Security+, CySA+, or equivalent certifications.
• Microsoft security certifications such as SC-200, SC-300, or SC-900 advantageous.
• 6–10 years of cybersecurity experience with a focus on security operations.
• Proven incident response, threat remediation and vulnerability management experience.
• Experience with Security Operations Centres and threat detection platforms.
• Strong patch management and vulnerability remediation background.
• Experience managing endpoint detection and response technologies.
• Exposure to enterprise environments, including Active Directory and hybrid cloud.
• Experience with third-party security providers and managed security services.

Responsibilities

• Lead remediation and resolution of security incidents identified by security operations.
• Coordinate vulnerability management activities with timely identification and prioritisation.
• Oversee patch management initiatives and verify remediation effectiveness.
• Maintain and enhance endpoint protection and network security controls.
• Develop incident response playbooks, procedures, and workflows.
• Optimise threat detection, alert management and response processes.
• Monitor external security providers and ensure SLAs are met.
• Collaborate with infra, operations, development and compliance teams to strengthen security.
• Support security audits, compliance initiatives and risk management.
• Drive continuous improvement across cybersecurity operations and defence capabilities.

Skills

Incident response

Vulnerability management

Security operations

Patch management

Endpoint security

Threat detection

Alert management

Security workflow automation

Education

Bachelor's Degree in Information Security, Computer Science, Information Technology, or a related field

Tools

Microsoft Defender

Microsoft Sentinel

Microsoft 365 security tools

Active Directory

Job description

A leading organisation is seeking a Security Defence and Operations Lead to oversee the operational defence of its digital environment. This role focuses on incident response, vulnerability management, security operations, and the optimisation of critical security controls across the business.
The successful candidate will work closely with internal technology teams, security providers, and business stakeholders to ensure that cyber threats are effectively identified, contained, and remediated. You will be responsible for enhancing operational security processes, improving response capabilities, and driving a proactive approach to risk reduction.
This position is ideal for a cybersecurity leader who thrives in fast-paced environments and enjoys combining technical expertise with strategic security initiatives.

Key Responsibilities

• Lead the remediation and resolution of security incidents identified by security operations teams.
• Coordinate vulnerability management activities, ensuring timely identification, prioritisation, and resolution of security risks.
• Oversee patch management initiatives and verify the effectiveness of remediation activities.
• Maintain and enhance endpoint protection and network security controls.
• Develop and improve incident response playbooks, operational procedures, and security workflows.
• Optimise threat detection, alert management, and response processes.
• Monitor the performance of external security providers and ensure service level agreements are met.
• Collaborate with infrastructure, operations, development, and compliance teams to strengthen security posture.
• Support security audits, compliance initiatives, and operational risk management activities.
• Drive continuous improvement across cybersecurity operations and defence capabilities.

Job Experience and Skills Required

• Bachelor's Degree in Information Security, Computer Science, Information Technology, or a related field.
• CISSP, GCIH, CEH, Security+, CySA+, or equivalent cybersecurity certifications.
• Microsoft security certifications such as SC-200, SC-300, or SC-900 will be highly advantageous.
• 6 to 10 years of cybersecurity experience with a strong focus on security operations.
• Proven experience in incident response, threat remediation, and vulnerability management.
• Experience working with Security Operations Centres and threat detection platforms.
• Strong background in patch management and vulnerability remediation programmes.
• Experience managing endpoint detection and response technologies.
• Exposure to enterprise environments, including Active Directory and hybrid cloud infrastructure.
• Experience working with third-party security providers and managed security services.
• Security Operations Centre processes and threat management.
• Incident response and remediation.
• Vulnerability assessment and remediation programmes.
• Endpoint Detection and Response technologies.
• Security monitoring and alert management.
• Network security and segmentation.
• Security workflow automation.
• Cybersecurity frameworks such as NIST and MITRE ATT&CK.
• Microsoft Defender, Microsoft Sentinel, and Microsoft 365 security tools.