Security Engineer

The Hiring House; Pretoria; On-site; ZAR 600 000 - 800 000; Full time

Job summary

A cybersecurity solutions provider has an opening for a cybersecurity specialist in Pretoria. This role requires an engineering degree along with essential cybersecurity knowledge and skills. The successful candidate will manage security policies, perform risk assessments, and ensure compliance with industry standards. A strong background in AWS services and experience in penetration testing are highly valued. This position is ideal for someone eager to contribute to enhancing cybersecurity frameworks.

Qualifications

• Minimum 5 years of experience in cybersecurity management and compliance.
• Deep understanding of cloud security and AWS services.
• Experience with penetration testing and vulnerability scans in diverse environments.

Responsibilities

• Manage cybersecurity policies and procedures.
• Conduct risk assessments and compliance checks.
• Implement and monitor security solutions.

Skills

Cybersecurity Management

AWS ecosystem

Automation

Linux/Windows server administration

Networking

Scripting and automation

IT security knowledge

Education

Engineering degree (Computer, Software, Mechanical or Electronic)

OSCP

PNPT

CISSP

CCSP

Job description

Key Performance Areas

• Cybersecurity Management
• Infrastructure Management
• Risk Management and Compliance
• QMS and Documentation

Minimum Education (essential)

• Engineering degree (Computer, Software, Mechanical or Electronic)

Minimum Education (desirable)

• OSCP (Offensive Security Certified Professional)
• PNPT (Practical Network Penetration Tester)
• CISSP (Certified Information Systems Security Professional)
• CCSP (Certified Cloud Security Practitioner)

Minimum Applicable Experience (years)

• AWS' ecosystem: AWS Well Architected Framework, Trusted Advisor, GuardDuty / SCP / SSM / IAM / WAF, Container services such as ECS/EKS, Incident detection and response management.
• Performing penetration tests and vulnerability scans against networks and infrastructure, applications and AWS environments.
• Drafting and implementing security policies, security procedures, security design and implementation.

Advantageous

• ISO 14971 (risk management) compliance
• ISO 27032 (cybersecurity) compliance
• SOC2 Type 2 (with HiTrust attestation) or HiTrust experience (or equivalent)

Skills and Knowledge (essential)

• Deep understanding of automation, quality engineering, architectural methodologies, principles, and solution design.
• Familiarity with operational observability, including log aggregation, application performance monitoring, etc.
• Understanding of the following: Linux/Windows server and application administration and configuration, networking, scripting and automation, large scale distributed computing architecture.
• Solid knowledge of IT security (firewalls, EDR, IDS/IPS, SOAR, vulnerability scanning forensic and Threat Hunting).
• Understanding of AWS ECS & Kubernetes and Containerisation (Docker/Podman/Containerd) with implementation, support, and design.
• Knowledge in security classification frameworks like MITRE or the cyber-attack kill chain.
• Good knowledge and understanding of industry standards, memberships, and frameworks such as CIS and SOC 2.