Security Engineer

The Hiring House; Pretoria; On-site; ZAR 400,000 - 500,000; Full time

Job summary

A cybersecurity consultancy is seeking a professional with significant experience in cybersecurity management, particularly within the AWS ecosystem. Candidates should hold an engineering degree and possess strong knowledge of IT security along with relevant certifications. The role involves managing cybersecurity operations, implementing security policies, and ensuring compliance with industry standards. This position is based in Pretoria, South Africa.

Qualifications

• 3+ years of experience with AWS and its services.
• Experience in conducting penetration tests and vulnerability scans.
• Solid knowledge of IT security principles.

Responsibilities

• Manage cybersecurity operations and incident response.
• Implement security policies and procedures.
• Conduct risk management compliance assessments.

Skills

Deep understanding of automation

Quality engineering

Architecture methodologies

Linux administration

Windows administration

Networking

Scripting

Automation

Forensic analysis

Threat hunting

Education

Engineering degree (Computer, Software, Mechanical or Electronic)

OSCP

PNPT

CISSP

CCSP

Tools

AWS

GuardDuty

SCP

SSM

IAM

WAF

ECS

EKS

Docker

Podman

Containerd

Job description

Key Performance Areas

• Cybersecurity Management
• Infrastructure Management
• Risk Management and Compliance
• QMS and Documentation

Minimum education (essential):

• Engineering degree (Computer, Software, Mechanical or Electronic)

Minimum education (desirable):

• OSCP (Offensive Security Certified Professional)
• PNPT (Practical Network Penetration Tester)
• CISSP (Certified Information Systems Security Professional)
• CCSP (Certified Cloud Security Practitioner)

Minimum applicable experience (years):

• AWS ecosystem:
• AWS Well Architected Framework
• Trusted Advisor
• GuardDuty / SCP / SSM / IAM / WAF
• Container services such as ECS / EKS
• Incident detection and response management
• Performing penetration tests and vulnerability scans against networks, infrastructure, applications, and AWS environments
• Drafting and implementing security policies, procedures, and designs

The following would be advantageous:

• ISO 14971 (risk management) compliance
• ISO 27032 (cybersecurity) compliance
• SOC2 Type 2 (with HiTrust attestation) or HiTrust experience (or equivalent)

Skills and Knowledge (essential):

• Deep understanding of automation, quality engineering, architecture methodologies, principles, and solution design
• Familiarity with operational observability, log aggregation, application performance monitoring, etc.
• Understanding of Linux / Windows server and application administration, networking, scripting, and automation, large-scale distributed architecture
• Solid knowledge of IT security (firewalls, EDR, IDS / IPS, SOAR, vulnerability scanning, forensic analysis, Threat Hunting)
• Understanding of AWS ECS & Kubernetes, containerization (Docker / Podman / Containerd), including implementation, support, and design
• Knowledge of security frameworks like MITRE or the cyber-attack kill chain
• Good knowledge of industry standards, memberships, and frameworks such as CIS and SOC 2