Senior Security Engineer - Incident Response & Tooling

Gxa; South Africa; On-site; ZAR 650,000 - 950,000; Full time

Job summary

GXA is seeking a Security Engineer to serve as a Tier 3 escalation point and to support the gShield security stack across client environments. The role combines incident response, tool operations, and infrastructure security to strengthen overall security posture.

The ideal candidate will troubleshoot across identity, endpoints, servers, networking, and cloud services, while maintaining operational excellence and timely remediation during live security events.

Qualifications

• Hands-on security engineering and incident response experience.
• Experience with security platforms such as Microsoft Defender, Huntress, DNSFilter.
• Ability to investigate security alerts across identity, endpoint, network, and cloud.

Responsibilities

• Serve as Tier 3 escalation point for active security incidents and coordinate containment.
• Operate gShield toolstack and support security operations across client environments.
• Triage alerts, analyze logs, and assist with vulnerability management and remediation.

Skills

Incident response

Security operations

Threat analysis

Vulnerability management

Endpoint security

Network security

Cloud security

Tools

Huntress

Microsoft Defender for Endpoint

Cyrisma

DNSFilter

SIEM

Job description

GXA is seeking a Security Engineer to serve as a Tier 3 escalation point and to support the gShield security stack across client environments. The role combines incident response, tool operations, and infrastructure security to strengthen overall security posture.

The ideal candidate will troubleshoot across identity, endpoints, servers, networking, and cloud services, while maintaining operational excellence and timely remediation during live security events.