Security Support Engineer

Cloudbox; Cape Town; On-site; ZAR 350,000 - 550,000; Full time

Benefits offered by this job

Access to security and cloud learning/

Job summary

Cloudbox in Cape Town is seeking a Security Support Engineer to join the security team. This developmental role offers mentoring across core security functions, focusing on monitoring, incident response, and automation.

You will work with EDR, SIEM, and Microsoft security tools, configure baselines, assist in onboarding customers, and contribute to documentation and playbooks while developing your practical security skills in a fast-paced environment.

Qualifications

• Microsoft security certifications listed above are required.
• Experience with security monitoring, incident handling and documentation.
• Strong networking knowledge and Windows/macOS troubleshooting.
• Ability to automate tasks with PowerShell.

Responsibilities

• Triage and investigate security alerts from EDR, SIEM, and monitoring platforms.
• Assist with deployment and configuration of security tools and onboarding of new customers.
• Create and maintain security baselines across customer environments.
• Maintain asset and vulnerability tracking data.
• Contribute to internal documentation and automation scripts.
• Develop and refine security playbooks and alerts documentation.

Skills

Analytical thinking

Detail-oriented

Security-minded

Proactive learner

Strong communicator

Team player

Education

Microsoft SC-900

Microsoft SC-200

Microsoft SC-100

Microsoft AZ-500

Microsoft MD-102

Microsoft 365 Certified: Administrator Expert

CompTIA Security+

CompTIA CySA+

Tools

Microsoft Defender for Endpoint

Defender for Cloud

Defender for Office 365

Intune

Azure AD Entra ID

PowerShell

MDM

EDR

SIEM

Job description

Role Description

As a Security Support Engineer, you'll work closely with our Head of Security and wider engineering teams. This is a developmental role where the right individual will be mentored and trained across core security functions. Your responsibilities will span, but are not limited to:

Security Monitoring & Incident Support

• Assist with triaging and investigating security alerts from our EDR, SIEM, and other monitoring platforms
• Perform initial classification and analysis of events and escalation where required
• Help maintain security playbooks and alert handling documentation

Baseline and Environmental Health

• Support in the creation and maintenance of configuration and security baselines across customer environments
• Assist in routine reviews and audits of endpoint and cloud security configurations
• Remain up to date with landscape changes

Project & Implementation Support

• Assist with deployment and configuration of security tools (e.g., EDR agents, logging solutions, monitoring sensors)
• Help maintain asset and vulnerability tracking data
• Support onboarding of new customers into security tools and processes

Documentation & Automation

• Contribute to internal documentation and knowledgebase content related to security processes
• Assist in automating repeatable tasks using PowerShell and other scripting tools
• Help improve internal efficiency through process reviews and playbook refinements
• Third party risk management assessments

Technical Skills

• Strong foundation in Microsoft 365 (Exchange, SharePoint, Teams, OneDrive) and Azure
• Hands-on experience with Windows OS and core troubleshooting; macOS is a plus
• Familiarity with Microsoft Defender for Endpoint, Defender for Cloud, and Defender for Office 365
• Understanding of Intune, MDM, Conditional Access, and Entra ID (Azure AD) security features
• Knowledge of basic networking concepts (IP addressing, routing, firewalls)
• Scripting experience (PowerShell preferred) to assist in automation and reporting tasks

Soft Skills

• Analytical, detail-oriented, and security-minded
• Proactive learner with the ability to absorb and apply new technical concepts
• Strong communicator (written and verbal) capable of working with both technical and non-technical stakeholders
• High sense of accountability, ownership, and follow-through
• Team player who thrives in a fast-paced, evolving environment

Qualifications & Experience

• Microsoft SC-900 (Security, Compliance, and Identity Fundamentals)
• Microsoft SC-200 (Security Operations Analyst Associate)
• Microsoft SC-100 (Microsoft Cybersecurity Architect)
• Microsoft AZ-500 (Azure Security Engineer Associate)
• Microsoft MD-102 (Modern Desktop Administrator Associate)
• Microsoft 365 Certified: Administrator Expert
• CompTIA Security+
• CompTIA CySA+ (Cybersecurity Analyst)

Location

This role is based in Pinelands, Cape Town South Africa

Working Hours

The standard 8-hour shift between 3PM and midnight, Monday to Friday, is aligned with global support needs. Shift flexibility may be required to balance business coverage.

Benefits

• Access to security and cloud certification resources and learning platforms