Senior IT Security Engineer

Sabenza IT & Recruitment; Johannesburg; On-site; ZAR 300 000 - 400 000; Full time

Job summary

A recruitment firm is looking for a Senior Information Security Engineer to design and implement advanced security solutions across hybrid environments. Responsibilities include overseeing security operations, managing incidents, leading vulnerability management, and ensuring compliance with industry standards. The ideal candidate has a degree in IT or a related field and holds relevant certifications like CISSP. This role offers the opportunity to lead security initiatives and improve organizational security posture.

Qualifications

• Experience designing security solutions for on-prem and cloud environments.
• Proven track record in leading security operations.
• Strong knowledge of vulnerability and patch management strategies.

Responsibilities

• Design and implement advanced security controls for various environments.
• Oversee security platforms and develop automation for threat detection.
• Lead investigations into security incidents and manage outsourced services.

Skills

Advanced security controls design

Security architecture standards

Managed Security Operations & response

Incident investigation and forensic analysis

Identity and access management

Education

Diploma or Bachelor’s Degree in IT, Computer Science, or related field

CISSP, CISM, or equivalent senior-level certification

Microsoft Cybersecurity Architect Expert or SC-series certification

Job description

We are seeking a Senior Information Security Engineer to design, implement, and lead advanced security solutions across hybrid on-prem and cloud environments (Azure, Microsoft 365).

Key Responsibilities

1. Security Architecture & Engineering

• Design and implement advanced security controls across on-prem, cloud, and SaaS environments (Azure, Microsoft 365).
• Define and enforce security architecture standards.
• Lead secure SDLC initiatives and application security assessments.
• Configure and maintain enterprise firewalls and Web Application Firewalls (WAF).

2. Security Operations Leadership

• Oversee and optimize security platforms (Firewalls, SIEM, EDR, DLP, Vulnerability Management).
• Develop automation for threat detection and response integrated with ITSM tools.
• Define operational playbooks and mentor junior engineers.
• Manage and govern outsourced SOC services, SLAs, and performance metrics.

3. Incident Response & Threat Management

• Lead major incident investigations, forensic analysis, and root cause analysis.
• Act as escalation point for critical security incidents.
• Drive proactive threat hunting initiatives.

4. Vulnerability & Patch Management

• Define vulnerability management strategy.
• Ensure timely remediation of critical risks.
• Deliver executive-level risk and remediation reporting.

5. Identity & Access Management

• Architect enterprise identity governance using Microsoft Entra ID (Azure AD).
• Implement privileged access management and Zero Trust principles.

6. Security Awareness

• Design and deliver enterprise-wide security awareness programs.
• Measure effectiveness and report outcomes to leadership.

7. Compliance & Risk Advisory

• Ensure alignment with ISO 27001, NIST CSF, CIS Benchmarks, POPIA, GDPR, FSCA.
• Lead technical audits, penetration tests, and red/blue team exercises.

8. Reporting & Executive Engagement

• Deliver security dashboards, metrics, and board-level reporting.
• Recommend and track continuous security posture improvements.
• Produce detailed firewall and WAF configuration and performance reports.

Qualifications & Experience

Education & Certifications

• Diploma or Bachelor’s Degree in IT, Computer Science, or related field.
• CISSP, CISM, or equivalent senior-level certification.
• Microsoft Cybersecurity Architect Expert or SC-series certification.