Senior Security Operations Engineer

Lula; Cape Town; On-site; ZAR 750,000 - 950,000; Full time

Job summary

A leading FinTech company in Cape Town seeks a Senior Security Operations Engineer to enhance the security posture of its Azure infrastructure. Responsibilities include managing security controls, conducting audits, and ensuring compliance with regulations. The ideal candidate will have at least five years of experience in a SecOps role with expertise in Microsoft technologies and cloud security.

Qualifications

• 5 years of experience in a SecOps field, preferably using Microsoft technologies.
• Expert knowledge of Cloud focused security features including Azure Defender, Azure Sentinel.
• Experience with security assessments, vulnerability scanning, and incident simulations.

Responsibilities

• Partner with DevSecOps team to manage security controls for Azure Infrastructure.
• Conduct regular security assessments and audits of Azure and internal infrastructure.
• Monitor and manage company's access control and camera systems.

Skills

Splunk

Compliance Management

IDS

SOC

Cybersecurity

Identity & Access Management

Security

Information Security

Process Engineering

Metadata

Encryption

Siem

Education

Tertiary qualification in Computer Science or Information Security

Tools

Microsoft Azure

Kali

SAST tools (e.g., SonarCloud)

Job description

Job title : Senior Security Operations Engineer

Reporting to : Engineering Team Lead

Location : Cape Town

ALL STAFF APPOINTMENTS WILL BE MADE WITH DUE CONSIDERATION OF THE COMPANYS EE TARGETS

WHAT WE DO

Lula is an innovative and human-focused FinTech company on a mission to help small businesses optimise their cash flow. Our purpose is to help SMEs manage their businesses better faster and more simply so they can spend more time doing what they love.

If youre looking for a new place to call home that believes in the potential of the broader SME landscape in South Africa and a place where youll work with awesome people - then Lulas the place for you!

Were making business banking fast human Lula!

CULTURE CODE

We embrace C uriosity

We win as O ne

Were D riven by Purpose

We E xecute with Ambition

OVERALL PURPOSE

We are looking for a Senior Security Operations Engineer to join our team. The successful candidate will be responsible for securing monitoring and maintaining the overall security posture of our Azure platform and infrastructure as well as our on-site networks and systems. You will work closely with all departments and teams to implement and provide guidance on security best practices and regulatory compliance. As a Senior Security Operations Engineer you will also be responsible for identifying and responding to security incidents and conducting security assessments audits and simulations.

Responsibilities will include :

• Infrastructure Security

Partner with our DevSecOps team to design implement and manage security controls and policies for our Microsoft Azure Infrastructure

Partner with our Engineering teams to ensure that code deployed on Lulas infrastructure is done securely

Conduct regular security assessments and audits of Azure and internal infrastructure and platforms including vulnerability scanning and penetration testing

Identity Security

Manage and regularly audit our privileged accounts to ensure access remains relevant and required

Design implement and manage policies and controls to secure Lulas accounts and access to our resources using Microsoft Entra ID toolsets

Provide security awareness training to the business to improve our security posture

Perform security incident / phishing simulations to ensure our processes and training are robust and effective

On-Premise Security

Monitor and manage Lulas access control and camera systems

Provide guidance and support to internal departments on handling of confidential information

Partner with our Technical Support team to ensure Lulas network and endpoints are configured securely and monitored for threats

Regulatory Compliance and Governance

Be a critical part of Lulas PCI DSS annual re-certification process

Develop and maintain security documentation including policies procedures and technical standards that adhere to compliance requirements

Collaborate with external auditors and partners to ensure compliance with various regulatory requirements and industry standards

Security Incident Management

Be the key point of contact for security incident and alert investigations

Develop remediation plans conduct Root Cause Analysis and provide corrective and preventative measures during Post Incident Reviews

Participate in on-call rotation to provide 24 / 7 support for Security Incidents

THE SKILLS AND EXPERIENCE WERE LOOKING FOR

Tertiary qualification in Computer Science Information Security or equivalent experience

5 years of experience in a SecOps field preferably using Microsoft technologies with a focus on Azure

Expert knowledge of Cloud focussed security features including Azure Defender for Cloud Azure Sentinel Entra ID Front Door Privileged Identity Management Intune and Defender for Endpoint

Experience with security assessments and audits including vulnerability scanning penetration testing and incident simulations

Hands-on Kali experience would be beneficial

Exposure to configuring SAST tools like SonarCloud

Familiarity with industry standards and regulatory requirements such as POPIA PCI DSS and ISO 27001

Familiarity with security related network technologies such as firewalls & VPNs

Azure or Cyber Security certifications such as Azure Security Engineer Associate Azure Solutions Architect Expert or CISSP are a plus

Knowledge of securing coding practices like OWASP

Knowledge of secure API implementation technologies OAuth and OIDC

Please note that all appointments are subject to our background checking process which may include Credit Criminal and any other job inherent checks.

Required Experience :

Senior IC

Key Skills

Splunk,Compliance Management,IDS,SOC,Cybersecurity,Identity & Access Management,Security,Information Security,Process Engineering,Metadata,Encryption,Siem

Employment Type : Full-Time

Experience : years

Vacancy : 1