Security Engineer II

Shoprite Group of Companies; Wes-Kaap; On-site; ZAR 550,000 - 750,000; Full time

Job summary

Shoprite Group of Companies is seeking a Network Security Engineer II to deliver and optimise cyber security engineering capabilities across platforms. You will translate security requirements into practical solutions, drive automation, threat intelligence integration and support secure, scalable technology environments.

Responsibilities include implementing controls, deploying SIEM/EDR/WAF/DLP and encryption, monitoring incidents, performing vulnerability assessments and contributing to

Qualifications

• Qualification in computer science, cybersecurity, or related field (advantageous).
• CISSP certification is essential.
• +4 years of cybersecurity experience with multiple security products (essential).
• Knowledge of cloud compute, network, storage, content delivery, administration and security (essential).
• Strong understanding of information security standards, architecture and models (essential).
• Hands-on automation and DevSecOps skills (essential).
• Familiarity with CI/CD and deployment orchestration (preferred).
• Experience in incident response and documenting threats (desired).

Responsibilities

• Implement and maintain security controls across systems, networks, and platforms.
• Deploy and optimise security technologies (SIEM, EDR, IAM, WAF, DLP and encryption).
• Monitor for incidents and vulnerabilities; investigate and respond with relevant teams.
• Develop security standards, policies, and procedures; provide governance guidance.
• Automate security processes and embed security into DevSecOps pipelines.
• Collaborate with engineering to embed security into system design and architecture.

Skills

Security engineering

Threat monitoring

DevSecOps

Automation

Incident response

Education

CISSP certification

Computer science / cybersecurity degree

Tools

SIEM

EDR

WAF

IAM

PAM

DLP

Encryption

Firewalls

Job description

The purpose of the Network Security Engineer II is to deliver and optimise cyber security engineering capabilities across platforms by implementing controls, strengthening system resilience, and managing security risks. Translates security requirements into practical solutions, drives automation and threat intelligence integration, and supports the delivery of secure, scalable technology environments.

What you'll do

Security Engineering & Control Implementation

• Implement and maintain security controls across systems, networks, and platforms.

• Deploy and optimise security technologies, for example SIEM, EDR, IAM, WAF, DLP and encryption.

• Support the installation, configuration, and improvement of security tools and processes.

• Ensure platforms comply with defined security standards and requirements.

Threat Monitoring, Detection & Response

• Monitor systems and networks for security incidents and vulnerabilities.

• Investigate, analyse, and respond to security events in collaboration with relevant teams.

• Conduct vulnerability assessments, log analysis, and continuous monitoring.

• Support incident response processes and contribute to remediation actions.

Risk Mitigation & Continuous Improvement

• Identify security gaps and recommend enhancements to reduce risk exposure.

• Evaluate and implement new security technologies and best practices.

• Conduct research on emerging threats, vulnerabilities, and control strategies.

• Contribute to improving the organisation's overall security posture.

Security Standards, Governance & Enablement

• Develop and maintain security standards, policies, and procedures.

• Translate technical security requirements into business-aligned recommendations.

• Provide guidance to stakeholders on security risks and control effectiveness.

• Support alignment to information security frameworks and best practices.

Automation, DevSecOps & Integration

• Automate security processes, controls, and reporting for operational efficiency.

• Support DevSecOps practices by integrating security into development pipelines.

• Enable improved visibility through metrics, reporting, and threat intelligence feeds.

• Work closely with engineering teams to embed security into system design.

What you bring

• A qualification in computer science, cybersecurity, or any related field (advantageous).

• Recognised industry certification in cybersecurity, such as CISSP (essential).

• +4 years of experience in cybersecurity, with solid experience across a variety of security products including firewalls, EDR, SIEM, WAF, IAM, PAM, DLP and encryption solutions or similar (essential).

• Knowledge of services related to cloud compute, network, storage, content delivery, administration and security (essential).

• Good understanding and exposure to Information Security standards, architecture and models (essential).

• Hands-on knowledge of automation and DevSecOps skills (essential).

• Good understanding of software development principles, including design patterns, code structure, programming languages, continuous integration, continuous deployment and deployment orchestration (preferred).

• Experience in creating new ways to solve existing production security issues and recommending security enhancements (desired).

• Experience in Incident Response, including the ability to document security threats, resolve technical faults and allocate resources to deliver real solutions in a cost-effective way (desired).