Security Operations Engineer

Parvana; Cape Town; Híbrido; ZAR 800.000 - 1.200.000; Jornada completa

Descripción de la vacante

Parvana is seeking a Security Operations Engineer in Cape Town to manage daily security operations, monitor security tools, investigate incidents and drive threat detection enhancements. You will configure EDR, SWG, UEBA, PAM and SSO, embedding security into CI/CD and cloud deployments.

You will lead incident response, implement CSPM across environments and collaborate on secure designs, research threats, and support staff awareness. Hybrid/Remote work is offered with generous benefits.

Formación

• Minimum 5 years in Security Operations or Cloud Security Engineering roles.
• Hands-on Azure and cloud security tooling experience, incl. IaC and CI/CD security.
• Expertise in security incident response planning and MITRE ATT&CK framework familiarity.

Responsabilidades

• Manage daily security operations, including tickets, monitoring tools, investigations and major incidents.
• Configure and operate core security tools (EDR, SWG, UEBA, SEG, PAM, SSO) and improve security standards.
• Embed security across cloud environments and CI/CD pipelines using IaC security scanning, AKS, Defender for Cloud and CSPM.
• Provide input on security designs, controls, and threat research to improve security posture.
• Support security awareness programs and phishing simulations.

Conocimientos

Security Operations

Cloud Security Engineering

Azure

Defender for Cloud

Datadog

CI/CD Security

AKS

Threat Hunting

Incident Response

ISO 27001

MITRE ATT&CK

Herramientas

EDR

SWG

UEBA

PAM

M365

Kubernetes

Datadog

Defender for Cloud

Descripción del empleo

Location: Cape Town | Work Type: Hybrid / Remote | Contract Duration: 12 months | Job ID: J107190

About our client:

Our client is a global investment advisory firm focusing on long-term value creation through investment strategies. They work with a diverse group of institutional partners and pride themselves on their collaborative, sustainable, inclusive culture and performance. You are welcome to go into the office daily or to take advantage of their hybrid in-office / remote benefit. This company places significant investment in employee wellness, their benefits which are on top of generous basic salaries, are industry leading in their generosity. Our client is large, offering fantastic career development opportunities but also very dynamic, they track as many metrics as possible in order to continuously improve - they spare no expense on the tools to do so. Automation, AI and R&D are pillars of their business framework which ensures you should never be at risk of falling behind or getting stuck working with old legacy software. Culturally they are very cosmopolitan and diverse, you will be working with the best globally.

What you will be doing:

• Manage daily security operations, including handling support tickets, monitoring security tools (internal and managed SOC), investigating incidents, major incident response, operating runbooks, and monitoring threat feeds.
• Configure and operate core security tools (EDR, SWG, UEBA, SEG, PAM, SSO), implement technical security standards, provide input on security posture, and manage the vulnerability management process.
• Embed security across cloud environments and CI/CD pipelines, leveraging Infrastructure as Code (IaC) security scanning, containerization practices (AKS), and tools like Microsoft Defender for Cloud and Datadog for both code security and Cloud Security Posture Management (CSPM).
• Offer technical security advice for projects (control design, process review, SSDLC input), contribute to technical security designs and policies, ensure the secure implementation of cloud services, and research emerging threats/vulnerabilities.
• Support ongoing security awareness programs through staff training, running phishing tests, and communicating new/emerging threats via intranet announcements.

What our client is looking for:

• Minimum 5 years in a Security Operations or Cloud Security Engineering role, demonstrating strong technical expertise across security monitoring, detection, prevention, and control systems.
• Strong hands-on cloud security experience, including Infrastructure as Code (IaC) tooling, Securing CI/CD pipelines, container security and orchestration (AKS), and operationalizing tools such as Defender for Cloud and Datadog for code security and CSPM.
• Hands-on experience with security incident response planning and ensuring its ongoing effectiveness.
• Expertise in Azure, M365, OWASP Top 10, SANS Top 20, and the MITRE ATT&CK framework (Microsoft or SANS certifications are desirable).
• Knowledge of industry standards (e.g., ISO 27001:2022), data handling best practices, and expertise in global data protection laws (e.g., GDPR), especially for the financial sector.
• Ability to stay current with evolving threat actor Tactics, Techniques, and Procedures (TTPs) and necessary mitigation mechanisms.
• A passion for creating secure, scalable, and resilient systems; strong problem-solving skills; a desire to be part of a highly effective, service-orientated cyber security function; and a commitment to ethics, compliance, and urgency.

For a more comprehensive list of opportunities that we have on offer, do visit our website - https://www.parvana.co.uk/careers

Requirements

Security Operations Engineer, Infrastructure as Code (IaC), CI/CD Security, Defender for Cloud, Datadog, CSPM, Code Security, Containers, AKS, Azure, Incident Response, EDR, SWG, UEBA, PAM, M365, MITRE ATT&CK, GDPR, ISO 27001