Security Engineer: Analysis and Support

FSCA South Africa; Pretoria; On-site; ZAR 400 000 - 500 000; Full time

Job summary

A South African regulatory authority is looking for an ICT Security Engineer to fortify its cyber security measures. The successful candidate will oversee the Security Operations Centre, coordinate incident responses, and manage cybersecurity initiatives. The role requires strong communication skills and the ability to work independently under pressure. The position encourages diverse candidates, especially those with disabilities, to apply.

Qualifications

• Experience in security operations center management and incident response.
• Knowledge of cyber security frameworks such as NIST CSF and ISO27001.
• Capable of conducting security penetration testing and vulnerability assessments.

Responsibilities

• Monitor the SOC and respond to security incidents.
• Coordinate cybersecurity incident responses and update incident plans.
• Manage performance of SOC solutions and coordinate ITGC requests.

Skills

Verbal communication

Written communication

Interpersonal skills

Ability to learn quickly

Tools

SIEM

XDR

Job description

Purpose Of The Job

The ICT Security Engineer: Analysis and Support, will play a critical role in safeguarding the organisation's information and cyber security posture. This position is primarily responsible for the Security Operations Centre (SOC) and support, cyber threat analysis and investigative activities to manage the security events and incidents. This role will also be responsible for the training programme to encourage a culture of cyber security awareness, compliance to policies, standards procedures and regulatory requirements. The successful candidate will collaborate with cross‑functional teams and stakeholders for security project initiatives and to facilitate mitigation plans across the organisation. The person appointed to this role will report to the Departmental Head: ICT Security and Risk.

Key Performance Areas

• Monitor the cyber security operations center and respond to the security incident response actions.
• Coordinate the cyber security incident response (CSIRT), periodically update the cyber security incident response plan (CSIRP) and Crisis Management Plan (CMP) as required.
• Coordinate the periodic security penetration testing and security vulnerability remediation activities.
• Manage and maintain optimal performance of the Security Operations Center solutions (log collector agents, SIEM, XDR and Vulnerability Management)
• Define and develop the annual cyber security awareness programme, calendar and publish awareness content to the organisation.
• Perform a review of ICT security policies, standards and procedures as required and in line with industry frameworks (NIST CSF, ISO27001, COBIT).
• Coordinate information technology general control (ITGC) requests for governance, assurance, business resilience audit and control assessments.
• Collaborate with cross‑functional teams to ensure security‑by‑design for project initiatives.
• Prepare monthly operational ICT security and cyber threat intelligence reports.

Other Key Competencies

The candidate must demonstrate the following skills and attributes: Good verbal and written communication skills, interpersonal skills, and must collaborate effectively with other team members. The candidate must be energetic, have the ability to learn new concepts fast, work independently and under pressure when it is required.

FSCA is committed to increasing the representation of marginalized groups in line with its Employment Equity Plan. People with disabilities are encouraged to apply.

Please note that correspondence and communication will only be conducted with shortlisted candidates and that the FSCA reserves the right not to appoint if a suitable candidate is not identified.