Security Engineer

The Hiring House; Pretoria; On-site; ZAR 400 000 - 500 000; Full time

Job summary

A technology recruitment agency in Pretoria is seeking a Cybersecurity Specialist responsible for managing cybersecurity and infrastructure. Candidates must have an engineering degree and experience in AWS, alongside certifications such as OSCP or CISSP. Applicants should have a deep understanding of IT security, automation, and risk management. This role promises a stimulating environment with opportunities for professional growth.

Qualifications

• Deep understanding of automation, quality engineering, architectural methodologies.
• Familiar with operational observability and IT security.
• Knowledge in security classification frameworks like MITRE.

Responsibilities

• Manage cybersecurity and infrastructure.
• Conduct vulnerability scans and penetration tests.
• Draft and implement security policies.

Skills

Cybersecurity Management

Infrastructure Management

Risk Management and Compliance

Deep understanding of automation

Understanding of AWS ECS & Kubernetes

Education

Engineering degree (Computer, Software, Mechanical or Electronic)

OSCP (Offensive Security Certified Professional)

CISSP (Certified Information Systems Security Professional)

Job description

Key Performance Areas

• Cybersecurity Management
• Infrastructure Management
• Risk Management and Compliance
• QMS and Documentation

Minimum education (essential)

• Engineering degree (Computer, Software, Mechanical or Electronic)

Minimum education (desirable)

• OSCP (Offensive Security Certified Professional)
• PNPT (Practical Network Penetration Tester)
• CISSP (Certified Information Systems Security Professional)
• CCSP (Certified Cloud Security Practitioner)

Minimum applicable experience (years)

• AWS' ecosystem :
• AWS Well Architected Framework
• Trusted Advisor
• GuardDuty / SCP / SSM / IAM / WAF
• Container services such as ECS / EKS
• Incident detection and response management.
• Performing penetration tests and vulnerability scans against networks and infrastructure, applications and AWS environments.
• Drafting and implementing security policies, security procedures, security design and implementation.

The following would be advantageous

• ISO 14971 (risk management) compliance
• ISO 27032 (cybersecurity) compliance
• SOC2 Type 2 (with HiTrust attestation) or HiTrust experience (or equivalent)

Skills and Knowledge (essential)

• Deep understanding of automation, quality engineering, architectural methodologies, principles, and solution design.
• Familiarity with operational observability, including log aggregation, application performance monitoring, etc.
• Understanding of the following : Linux / Windows server and application administration and configuration, networking, scripting and automation, large scale distributed computing architecture.
• Solid knowledge of IT security (firewalls, EDR, IDS / IPS, SOAR, vulnerability scanning forensic and Threat Hunting).
• Understanding of AWS ECS & Kubernetes and Containerisation (Docker / Podman / Containerd) with implementation, support, and design.
• Knowledge in security classification frameworks like MITRE or the cyber-attack kill chain.
• Good knowledge and understanding of industry standards, memberships, and frameworks such as CIS and SOC 2.