Senior Information Security Engineer | Midrand/Waterfall

The Uber Recruiter T/A The Recruitment Council; Midrand; On-site; ZAR 1,000,000 - 1,800,000; Full time

Job summary

The Recruitment Council is seeking a strategic security leader to design, implement, and optimize security across on-prem, cloud, and SaaS environments. The role requires guiding enterprise security strategy and aligning with ISO 27001, NIST CSF, GDPR, and other regulations.

You will lead security operations, incident response, vulnerability management, and threat hunting, while mentoring engineers and presenting risk dashboards to executives.

Qualifications

• 7+ years in cybersecurity or security engineering

Responsibilities

• Lead design and implementation of security controls across on-prem, cloud, and SaaS environments including Azure and Microsoft 365.
• Oversee and optimize security tools (SIEM, EDR, DLP) and manage outsourced SOC SLAs.
• Drive incident response, threat hunting, and investigations at senior level.
• Enforce identity governance with Entra ID and implement zero-trust architecture.
• Ensure compliance with ISO 27001, NIST CSF, CIS benchmarks, POPIA, GDPR, FSCA.

Skills

SIEM

EDR

Firewalls

DLP

PowerShell

Python

Zero-trust

Cloud security

Threat hunting

Education

Diploma or Bachelor's in IT/CS

Tools

Hillstone

NGINX

Microsoft Intune

Microsoft Purview

SIEM tools

Job description

Our client, a growing financial services organization, is seeking a strategic technical leader to support both on-premises and cloud-based environments. This permanent role is based in Waterfall, Midrand, and is available immediately.

The successful candidate will design, implement, and optimize advanced security architectures across our client's hybrid infrastructure, applications, and cloud environments. This senior engineer will drive security initiatives, collaborate with IT leadership to strengthen the enterprise security strategy, and ensure compliance with global standards and regulatory requirements.

Key Responsibilities:

• Security Architecture & Engineering: Lead the design and implementation of advanced security controls across on-prem, cloud, and SaaS environments, including Azure and Microsoft 365. Define security architecture standards, maintain enterprise firewalls, and manage Web Application Firewall (WAF) solutions.
• Security Operations Leadership: Oversee and optimize security tools such as SIEM, EDR, DLP, and vulnerability management platforms. Develop automation strategies for threat detection, integrate SOC services into the operations framework, and manage SLAs for outsourced SOC providers.
• Incident Response & Threat Management: Act as the escalation point for critical security events, lead major investigations and forensic analysis, and drive proactive threat hunting.
• Identity & Vulnerability Management: Enforce enterprise-level identity governance using Microsoft Entra ID (Azure AD), implement zero-trust principles, and define vulnerability management strategies.
• Compliance & Risk Advisory: Ensure strict alignment with ISO 27001, NIST CSF, CIS benchmarks, POPIA, GDPR, and FSCA regulations. Lead technical audits, penetration tests, and red/blue team exercises.
• Reporting & Awareness: Deliver board-level presentations, strategic risk dashboards, and configuration reports. Develop and measure engaging security awareness programs to educate employees and promote a culture of cybersecurity.

Requirements:

• Education: A Diploma or Bachelor's degree in IT, Computer Science, or a related field.
• Certifications: CISSP, CISM, or equivalent senior-level certifications, alongside Microsoft Certified: Cybersecurity Architect Expert or SC-series certifications.
• Experience: 7+ years in cybersecurity or security engineering, with a minimum of 3 years acting in a senior or lead capacity.
• Technical Skills: Expert-level knowledge of SIEM, EDR, firewalls, and DLP platforms. Strong experience with scripting (PowerShell, Python), identity governance, zero-trust architecture, and cloud security.
• Preferred Background: Experience with Hillstone security technologies, NGINX, Microsoft InTune, Microsoft Purview, and various SIEM solutions.
• Competencies: Excellent communication skills for both executive and technical audiences, strong troubleshooting abilities, proficiency in ITSM tools, and a proven ability to mentor junior engineers. Must be highly ethical, resilient, and results-oriented.