Security Support Engineer

Cloudbox; Cape Town; On-site; ZAR 450,000 - 750,000; Full time

Benefits offered by this job

Certification resources

Job summary

Cloudbox is hiring a Security Support Engineer in Cape Town to grow into an advanced security role. You will collaborate with the Head of Security and engineering teams to triage alerts, maintain baselines, and implement security tooling for diverse customer environments.

The role emphasizes hands-on configuration, scripting for automation, and continuous learning across Defender, Azure, and Microsoft 365 security services. This is a development track with mentorship and growth opportunities.

Qualifications

• Experience in security monitoring and incident response.
• Familiarity with Windows and cloud security configurations.
• Ability to automate tasks with PowerShell.
• Proactive learner and strong communicator.

Responsibilities

• Triaging security alerts from EDR and SIEM and escalating as needed.
• Maintain security baselines across customer environments.
• Assist deployment and configuration of security tools for customers.
• Document processes and contribute to knowledge base.
• Support third-party risk assessments.

Skills

Microsoft 365

Azure

Defender suite

Entra ID (Azure AD)

Networking basics

PowerShell scripting

Education

Microsoft SC-900

Microsoft SC-200

Microsoft SC-100

Microsoft AZ-500

Microsoft MD-102

Microsoft 365 Certified: Administrator Expert

CompTIA Security+

CompTIA CySA+

Tools

EDR

SIEM

Job description

Role Description

As a Security Support Engineer, you'll work closely with our Head of Security and wider engineering teams. This is a developmental role where the right individual will be mentored and trained across core security functions. Your responsibilities will span, but are not limited to:

Security Monitoring & Incident Support

• Assist with triaging and investigating security alerts from our EDR, SIEM, and other monitoring platforms
• Perform initial classification and analysis of events and escalation where required
• Help maintain security playbooks and alert handling documentation

Baseline and Environmental Health

• Support in the creation and maintenance of configuration and security baselines across customer environments
• Assist in routine reviews and audits of endpoint and cloud security configurations
• Remain up to date with landscape changes

Project & Implementation Support

• Assist with deployment and configuration of security tools (e.g., EDR agents, logging solutions, monitoring sensors)
• Help maintain asset and vulnerability tracking data
• Support onboarding of new customers into security tools and processes

Documentation & Automation

• Contribute to internal documentation and knowledgebase content related to security processes
• Assist in automating repeatable tasks using PowerShell and other scripting tools
• Help improve internal efficiency through process reviews and playbook refinements
• Third party risk management assessments

Technical Skills

• Strong foundation in Microsoft 365 (Exchange, SharePoint, Teams, OneDrive) and Azure
• Hands-on experience with Windows OS and core troubleshooting; macOS is a plus
• Familiarity with Microsoft Defender for Endpoint, Defender for Cloud, and Defender for Office 365
• Understanding of Intune, MDM, Conditional Access, and Entra ID (Azure AD) security features
• Knowledge of basic networking concepts (IP addressing, routing, firewalls)
• Scripting experience (PowerShell preferred) to assist in automation and reporting tasks

Soft Skills

• Analytical, detail-oriented, and security-minded
• Proactive learner with the ability to absorb and apply new technical concepts
• Strong communicator (written and verbal) capable of working with both technical and non-technical stakeholders
• High sense of accountability, ownership, and follow-through
• Team player who thrives in a fast-paced, evolving environment

Qualifications & Experience

• Microsoft SC-900 (Security, Compliance, and Identity Fundamentals)
• Microsoft SC-200 (Security Operations Analyst Associate)
• Microsoft SC-100 (Microsoft Cybersecurity Architect)
• Microsoft AZ-500 (Azure Security Engineer Associate)
• Microsoft MD-102 (Modern Desktop Administrator Associate)
• Microsoft 365 Certified: Administrator Expert
• CompTIA Security+
• CompTIA CySA+ (Cybersecurity Analyst)

Location

This role is based in Pinelands, Cape Town South Africa

Working Hours

The standard 8-hour shift between 3PM and midnight, Monday to Friday, is aligned with global support needs. Shift flexibility may be required to balance business coverage.

Benefits

• Access to security and cloud certification resources and learning platforms