Security Engineer

Samaha Consulting; Johannesburg; On-site; ZAR 550,000 - 1,100,000; Full time

Job summary

Samaha Consulting in Johannesburg seeks a Security Engineer focusing on Cloud, IAM, and cryptography to design secure-by-default architectures and automate security controls across cloud platforms.

You will partner with engineering teams to embed security into the SDLC, perform threat modelling, and lead secure coding practices, vulnerability remediation, and incident response.

Qualifications

• Experience designing cloud security architectures and secure-by-default controls.
• Strong knowledge of IAM, encryption, key management and cryptographic controls.
• Experience embedding security into the Software Development Lifecycle (SDLC).
• Familiarity with threat modelling, security testing and vulnerability remediation.
• Ability to automate security assessments and remediation at scale using scripting and cloud-native tools.

Responsibilities

• Design, implement, and maintain automated security guardrails across cloud environments.
• Partner with software engineering teams during ideation, architecture, and design to embed security.
• Provide security architecture guidance, threat modelling, and secure data and application designs.
• Conduct secure code reviews and security assessments, guiding remediation.
• Develop automated security assessment capabilities for continuous validation.
• Build and implement preventive and detective security controls for ongoing risk management.
• Collaborate with developers to implement secure patterns and pave-road solutions.
• Develop self-service security tooling for vulnerability identification and remediation.
• Integrate security controls into the SDLC, including security design reviews and testing.
• Automate security processes to improve scalability and efficiency.

Skills

Cloud & Infrastructure Security

IAM

Cryptography

Threat Modelling

DevSecOps

Secure Coding

Vulnerability Management

Security Automation

AI/ML Security

Incident Response

Security Governance

Self‑Service Security Platforms

Guardrails

Threat Detection

Job description

Security Engineer – Cloud, Identity & Cryptography

Professional Profile

Security Engineer with strong experience in cloud security, secure software development, identity and access management, cryptography, security architecture, threat modelling, and automated security controls. Experienced in partnering with engineering teams to embed security throughout the Software Development Lifecycle (SDLC), develop secure‑by‑default solutions, and automate security assessment and remediation at scale. Strong focus on leveraging cloud‑native technologies, automation, AI/ML, and DevSecOps practices to continuously identify, prevent, and remediate security risks.

Core Competencies

• Cloud & Infrastructure Security
• Security Architecture & Secure‑by‑Design
• Identity & Access Management (IAM)
• Authentication & Authorisation
• Cryptography & Key Management
• Threat Modelling & Risk Assessment
• Secure Coding & Code Review
• Application & API Security
• DevSecOps & CI/CD Security
• Security Automation & Security Guardrails
• Vulnerability Management & Remediation
• Preventive & Detective Security Controls
• Continuous Security Assessment
• Security Testing
• AI/ML‑Assisted Security
• Security Monitoring & Threat Detection
• Incident Response
• Security Governance & Risk Management
• Self‑Service Security Platforms & Tooling

Professional Experience – Relevant Responsibilities

• Designed, implemented, and maintained automated security guardrails and secure‑by‑default controls across cloud environments and enterprise platforms.
• Partnered with software engineering and development teams during the ideation, architecture, and design phases to identify security risks early and embed security into applications and services.
• Provided security architecture guidance, threat modelling, and recommendations for secure application, infrastructure, identity, and data designs.
• Conducted secure code reviews and security assessments, identifying vulnerabilities and providing practical remediation guidance to development teams.
• Developed automated security assessment capabilities to replace manual, point‑in‑time security reviews with continuous security validation and assurance.
• Built and implemented preventive and detective security controls to continuously monitor, identify, and mitigate security risks.
• Collaborated directly with developers to implement security fixes, reusable security patterns, and pave‑road solutions, making secure development the easiest development path.
• Developed scalable, self‑service security tooling that enabled engineering teams to identify, assess, and remediate vulnerabilities without creating dependencies on central security teams.
• Integrated security controls into the Software Development Lifecycle (SDLC), including security design reviews, threat modelling, secure coding, vulnerability assessment, and security testing.
• Automated security processes using scripting and programming, improving the scalability, consistency, and efficiency of security operations.
• Applied knowledge of industry‑standard vulnerabilities, attack techniques, and remediation strategies to strengthen application and cloud security.
• Worked collaboratively with security, engineering, architecture, and platform teams to define and execute long‑term security strategies.
• Supported security incidents and contributed to incident response activities, ensuring effective investigation, containment, remediation, and preventative improvements.
• Leveraged AI/ML tools and techniques to accelerate security assessments, automate threat detection, improve vulnerability triage, and enhance security analysis and code review workflows.
• Explored and implemented AI‑native security practices to improve the scalability and effectiveness of security engineering processes.
• Promoted security automation and engineering practices that enabled teams to operate securely at large scale without compromising development velocity.

Key Technical Areas

Cloud Security: AWS, Cloud Security Architecture, IAM, KMS, Security Controls, Cloud Infrastructure Security

Application Security: Secure Coding, Code Review, OWASP, API Security, Threat Modelling, Vulnerability Management

DevSecOps: CI/CD Security, Automated Security Testing, Security Gates, Continuous Assessment, Infrastructure as Code

Identity & Cryptography: Authentication, Authorisation, IAM, Identity Governance, Encryption, Key Management, Cryptographic Controls

Security Engineering: Security Automation, Guardrails, Paved Roads, Security Tooling, Preventive & Detective Controls

AI Security: AI/ML Security Automation, Automated Threat Detection, Vulnerability Triage, AI‑Assisted Code Review, AI‑Native Development

Incident Response: Security Monitoring, Threat Detection, Incident Investigation, Remediation, Continuous Improvement

Achievement‑Oriented CV Bullets

• Automated security assessments and controls across cloud environments, reducing reliance on manual security reviews and improving continuous security assurance.
• Designed and implemented secure‑by‑default cloud security guardrails, enabling development teams to deploy securely while maintaining engineering velocity.
• Partnered with engineering teams to integrate threat modelling, secure coding, security architecture reviews, and automated security testing throughout the SDLC.
• Developed self‑service security tooling that enabled engineering teams to independently identify and remediate security vulnerabilities, reducing security‑team bottlenecks.
• Implemented preventive and detective security controls to continuously identify security risks and provide ongoing assurance across critical cloud services.
• Applied AI/ML capabilities to automate security analysis, vulnerability triage, threat detection, and secure code review processes.
• Provided security architecture guidance for highly scalable cloud platforms, balancing security requirements with performance, availability, and developer experience.
• Collaborated across security and engineering teams to establish long‑term security strategies, reusable security patterns, and scalable security engineering practices.