Senior Security Engineer L4

Boardroom Appointments; Cape Town; On-site; ZAR 900,000 - 1,300,000; Full time

Job summary

Boardroom Appointments is seeking a Senior Security Engineer L4 in Cape Town to lead cybersecurity initiatives. The role requires evaluating security measures, monitoring systems, and coordinating with cross-functional teams to protect information assets.

You will manage identity & access, perform risk assessments, and drive incident response with a proactive security posture, including maintenance of documentation and compliance with POPI, GDPR, SOC 2, and PCI standards.

Qualifications

• Bachelor's degree in IT or a closely related field.
• Certifications in information security (CISSP, CISM) required.
• Minimum 5 years in cybersecurity support roles.
• Experience with multiple security domains (identity, access, network, incident response).
• Experience with industry standards (POPI, GDPR, SOC 2, PCI).

Responsibilities

• Analyse, test, troubleshoot, and support clients' cybersecurity investments.
• Monitor security of infrastructure, applications, and operations; develop security strategies.
• Perform system and account administration tasks.
• Maintain and document system architecture, standards and procedures.
• Produce monthly security dashboards and executive reports.

Education

Bachelor's Degree in IT or similar qualification

Certifications in Information Security

Tools

MFA

Active Directory

Perimeter and Data Centre Security

Vulnerability Management

Qualys VMDR

Nessus

Web Application Firewalling

FortiWeb

CloudFlare

Jumphost

ObserveIT

DLP Classification

Varonis

Email Security

Mimecast

PAM

Sailpoint

Firewall Assurance

SIEM

Trellix

Microsoft Sentinel

Splunk

Job description

About the job Senior Security Engineer L4

Contract position

• Bachelor's Degree in IT or similar qualification.
• Certifications in Information Security is required
• CISSP
• CISM
• A minimum of 5 years of experience performing cybersecurity support duties.
• A minimum of 2 years' experience in at least five of the following: access control systems and methodology; business continuity and disaster recovery planning; risk, response, and recovery; network security architecture; security management practices; audit and monitoring; enterprise and IT risk assessments; incident response management.
• Experience and expertise in managing and administering infrastructure and data systems.
• Experience with standards and best practices such as POPI, GDPR, SOC 2, PCI
  compliance
• Ability to work effectively in a multi-disciplinary, collaborative team environment or
  independently with minimal direction.
• Display high-energy, self-motivation, flexibility and an ability to multitask and prioritize
  demands in a fast-paced environment.
• Must possess a keen attention to detail and an ability to work effectively under pressure,
  and during non-core hours.
• Excellent customer service skills and an ability to clearly explain technical issues to non technical persons.
• Must be able to communicate clearly and professionally via phone, email and in person.
• Must be a very organized individual with the ability to clearly document their work in
  accordance with office procedures.
• MFA
• Web Proxy (SASE)
• Netskope
• Sandbox
• Thinkst Canary
• Identity and Access
• Active Directory
• Perimeter and Data Centre Security
• Vulnerability Management
• Qualys VMDR
• Vulnerability Management
• Nessus
• Web Application Firewalling
• FortiWeb
• Web Application Firewalling
• CloudFlare
• Jumphost
• ObserveIT
• DLP Classification
• Varonis
• Email Security
• Mimecast
• PAM
• Sailpoint
• Firewall Assurance
• Cloud
• SIEM
• Trellix, Microsoft Sentinel, Splunk

Responsibilities:

• Analyse, test, troubleshoot and support clients cybersecurity investment.
• Monitor the performance and security of infrastructure, applications and operations with the
  Protects information assets by developing security strategies, directing system access
  control, monitoring, and response.
• Perform system and account administration tasks.
• Contribute to, maintain, and document system architecture, standards, and procedures.
• Adhere to and identify solutions that streamline the internal workflow.
• Maintain the software license register and periodically re-verify existing license validity.
• Assists in Information Security projects to align with organizational strategic objectives,
  goals, and risk tolerance.
  
• Implement and regularly review automated monitoring cybersecurity for all infrastructure
  and application services.
• Maintain detailed infrastructure documentation, including an incident register for all
  cybersecurity incidents & outages.
• Maintain an up-to-date software license register, following pre-defined SOPs.
• Manage real-time infrastructure incidents to minimize operational business impact and
  maximize availability with the relevant cybersecurity service providers.
• Perform preventative and reactive maintenance to ensure required availability of services,in line with business needs, whilst adhering to defined change management principles
• Ensure that the relevant service providers process support requests within SLA.
• Perform system and account administration tasks within SLA.
• Perform project-based activities as directed by the IT project manager.
• Provide detailed & accurate estimates and feedback to the business as required.
  
• Review existing software license allocations to ensure optimal use.
• Review cybersecurity infrastructure and application monitoring for potential improvements
• Produce a monthly dashboard of pertinent security metrics.
• Produce a monthly reporting of pertinent cybersecurity metrics both technical and
  executive.