Security Incident Manager

Salix Recruitment; Johannesburg; On-site; ZAR 900,000 - 1,300,000; Full time

Job summary

Salix Recruitment is seeking an experienced Security Incident Manager to own the operational response to cybersecurity threats across a complex enterprise environment. This hands-on leadership role will coordinate incident remediation, drive vulnerability management and ensure critical security controls remain effective.

You will collaborate with Security Operations, IT Infrastructure, Service Desk, App Security, DevSecOps and Risk & Compliance teams to identify, contain and resolve threats

Qualifications

• Matric not specified; requires degree in Information Security / related field.
• ISSP, GCIH, CEH, CySA+ or equivalent certifications are preferred.
• 610 years progressive experience in cybersecurity operations, including hands-on incident response and threat remediation.

Responsibilities

• Lead the response and remediation of security incidents identified through the SOC.
• Coordinate vulnerability remediation across IT and infrastructure teams; track, prioritise and resolve.
• Oversee patch management and verify remediation activities.
• Maintain and optimise security controls including EDR and network segmentation.
• Develop and maintain incident response playbooks and operational procedures.
• Improve SOC alert handling, escalation and reporting workflows to reduce false positives.

Skills

Incident Response

SOC Operations

Threat Detection

Vulnerability Management

Security Controls & EDR

Patch Management

Playbooks & Workflows

Stakeholder Management

Vendor Management

Education

Bachelor's degree in Information Security/Computer Science/IT

Certifications: ISSP, GCIH, CEH, CySA+

Tools

EDR Tools

SOC Platforms

Patch Management Tools

SAP

Active Directory

Hybrid Cloud

Job description

Are you an experienced cybersecurity professional who thrives when it comes to incident response, threat remediation and strengthening security operations? Join a globally established organisation with a long-standing reputation for innovation, technology and responsible growth, operating across six continents and multiple industries. With a global footprint, complex operations and a strong focus on digitalisation.

Were looking for a Security Incident Manager to take ownership of the operational response to cybersecurity threats across a complex enterprise environment. This is a hands‑on leadership role where youll coordinate incident remediation, drive vulnerability management and ensure critical security controls remain effective.

Youll work closely with Security Operations, IT Infrastructure, Service Desk, Application Security, DevSecOps and Risk & Compliance teams to make sure threats are identified, contained and resolved quickly and effectively.

If you're ready to take ownership of security incident management and want a role where your expertise can genuinely shape an organisation's security operations, we'd like to hear from you.

Duties:

Lead the response and remediation of security incidents identified through the Security Operations Centre (SOC). Coordinate vulnerability remediation across IT and infrastructure teams, ensuring vulnerabilities are tracked, prioritised and resolved. Oversee patch management and validate that remediation activities have been completed effectively. Maintain and optimise security controls, including Endpoint Detection & Response (EDR) and network segmentation. Develop and maintain incident response playbooks and operational procedures. Improve SOC alert‑handling, escalation and reporting workflows, with a focus on reducing false positives and improving response efficiency. Work with third‑party SOC, vulnerability management and security service providers, monitoring their performance against agreed SLAs. Support security incident logging, reporting and post‑incident reviews. Partner with technical and non‑technical stakeholders to strengthen the organisations overall security posture. Ensure operational security practices remain aligned with relevant cybersecurity frameworks and compliance requirements.

Job Experience & Skills Required:

Qualifications:

Matric (Grade 12) Bachelors degree in Information Security, Computer Science, Information Technology or a related field. ISSP | GCIH | CEH | CompTIA Security+ / CySA+

Experience:

610 years progressive experience in cybersecurity operations, including hands‑on incident response and threat remediation. Experience working with or managing a Security Operations Centre (SOC) and vulnerability management platforms. Strong experience coordinating vulnerability remediation and patch management. Practical experience with EDR solutions, endpoint protection and network security controls. Experience developing incident response playbooks and operational workflows. Exposure to enterprise IT environments, ideally including SAP, Active Directory and hybrid cloud infrastructure. Strong understanding of SOC functions, threat detection and vulnerability management. Knowledge of cybersecurity frameworks such as NIST and MITRE ATT&CK. Excellent communication and stakeholder‑management skills, with the ability to remain decisive and analytical under pressure.

Skills & Competencies:

Incident Response & Remediation SOC & Threat Detection Vulnerability Management Security Controls & EDR Patch Management Incident Response Playbooks & Workflows Cybersecurity Frameworks Stakeholder & Vendor Management