Security Operations Engineer III - Remote & Detection Focus

Jobgether; South Africa; Remote; ZAR 700,000 - 1,100,000; Full time

Benefits offered by this job

Remote work

Equity options

Paid time off

Coworking access

Team events

Equipment provision

Home office stipend (£500)

Learning budget

Private medical

Location-based perks

Job summary

Jobgether's partner in South Africa seeks a Security Engineer III to own detection and response across Elastic/SIEM, AWS, and automation tooling. You will develop runbooks, automate workflows with Python and no-code tools, and contribute to SOC2/PCI DSS compliance while working with a distributed team.

Responsibilities include building detections, triaging incidents, and documenting investigations, with secure, autonomous ownership and collaboration in a modern payments infrastructure.

Qualifications

• Hands-on SIEM detector tuning across Elastic or similar platforms.
• Experience securing AWS and cloud-native detection/response.
• Proficient in Python for scripting and tooling.
• Experience with infrastructure-as-code (Terraform, etc.).
• Familiarity with the MITRE ATT&CK framework.
• Proven incident triage, investigation and resolution.
• Excellent written communication of findings and risk.
• Able to work independently and own security outcomes.

Responsibilities

• Plan end-to-end detection and response initiatives with automated workflows.
• Build and tune detections across cloud environments to close coverage gaps.
• Manage incident queue: triage, investigate, escalate, resolve.
• Document investigations and create runbooks to speed response.
• Participate in on-call rotation for monitoring.
• Support audit-ready controls for SOC 2 and PCI DSS.

Skills

Elastic SIEM

AWS security

Python scripting

Terraform IaC

MITRE ATT&CK

Incident investigation

On-call readiness

No-code automation

Tools

Zapier

Tines

Terraform

Job description

Jobgether's partner in South Africa seeks a Security Engineer III to own detection and response across Elastic/SIEM, AWS, and automation tooling. You will develop runbooks, automate workflows with Python and no-code tools, and contribute to SOC2/PCI DSS compliance while working with a distributed team.

Responsibilities include building detections, triaging incidents, and documenting investigations, with secure, autonomous ownership and collaboration in a modern payments infrastructure.