Senior Security Operations & Threat Hunter

Recruit-It; Somerset West; On-site; ZAR 900,000 - 1,600,000; Full time

Job summary

Recruit-It is seeking an experienced information security professional to lead security operations, vulnerability management, and cloud security for a multi-platform environment. You will investigate incidents, perform threat hunting, and coordinate remediation with ICT teams while maintaining security playbooks and governance across Microsoft 365, Azure, Entra ID, Linux, and Windows servers.

The role requires strong analytical skills, extensive incident response experience, and a proven ability

Qualifications

• Seven or more years of ICT experience.

Responsibilities

• Monitor security events across infrastructure, cloud platforms, endpoints, networks and applications.
• Investigate security alerts and incidents.
• Perform threat hunting and root cause analysis.
• Maintain and enhance SIEM and security monitoring capabilities.
• Coordinate incident response activities and post-incident reviews.
• Develop and maintain security playbooks and response procedures.
• Manage vulnerability scanning programmes.
• Analyse vulnerability assessment results.
• Coordinate remediation efforts with ICT teams.
• Validate remediation activities.
• Produce regular vulnerability and risk reports.
• Establish risk-based prioritisation of vulnerabilities.
• Design and implement security controls across Microsoft 365, Azure, Active Directory / Entra ID, Linux and Windows servers, network infrastructure and DevOps platforms.
• Implement and maintain multi-factor authentication, Privileged Access Management, Endpoint Detection and Response, Data Loss Prevention and security automation solutions.
• Evaluate and implement new security technologies.
• Secure Azure cloud environments.
• Review cloud configurations and architecture.
• Conduct cloud security assessments.
• Implement Microsoft security best practices.
• Support Zero Trust initiatives.
• Maintain cybersecurity risk registers.
• Conduct risk assessments.
• Support internal and external audits.
• Assist with policy and standard development.
• Support compliance requirements including POPIA, CIS Controls, and regulatory and client requirements.
• Review and approve security designs.
• Assess new solutions and projects for security risks.
• Define security standards and baselines with Team Lead and Line Manager.
• Develop secure architecture patterns with Team Lead.
• Promote security awareness initiatives.
• Conduct security training.
• Guide technical and business teams.
• Support organisational cyber resilience programmes.
• Support secure software development practices.
• Review security testing and code scanning.
• Assist development teams with remediation activities.

Skills

Security operations

Incident response

Threat investigation

Vulnerability management

Cloud security

Threat hunting

Automation scripting

Zero Trust

Teamwork

Education

Bachelor's degree or National Diploma in Information Security/IT/Engineering

Matric with 10 years' work experience

Tools

Microsoft Defender suite

Zabbix

SIEM/SOAR platforms

Azure

Active Directory / Entra ID

PowerShell

Python

REST APIs

Job description

Recruit-It is seeking an experienced information security professional to lead security operations, vulnerability management, and cloud security for a multi-platform environment. You will investigate incidents, perform threat hunting, and coordinate remediation with ICT teams while maintaining security playbooks and governance across Microsoft 365, Azure, Entra ID, Linux, and Windows servers.

The role requires strong analytical skills, extensive incident response experience, and a proven ability