Threat Intelligence Engineer

Old Mutual Life Assurance Company (SA) Ltd; Cape Town; On-site; ZAR 900,000 - 1,500,000; Full time

Job summary

Old Mutual Life Assurance Company (SA) Ltd is seeking a Manager of Self to provide technical security expertise across the SOC and related cloud security functions. The role coordinates with internal and external stakeholders and oversees a third‑party SOC service provider to ensure governance and accountability.

The ideal candidate has 5+ years in Cyber Security with a focus on Threat Intelligence, SOC operations, and incident response, and hands‑on experience with SIEM, EDR/XDR and cloud

Qualifications

• Bachelor's degree in Information Security, Computer Science, IT or related discipline.
• Minimum 5 years in Cyber Security with 3 years in Threat Intelligence, SOC, Threat Detection Engineering or Incident Response.
• Experience with enterprise security technologies including SIEM, EDR/XDR, threat intel platforms, and security monitoring tools.

Responsibilities

• Provide technical security assurance across SOC tooling, architecture, detection engineering and incident handling processes.
• Oversight of governance, decision support and service provider engagement.
• Build and maintain threat intelligence framework for network protection.
• Direct SOC platform and services delivery and drive capability development.
• Support cloud security controls and align SOC with Old Mutual's cloud security posture.

Skills

Threat intelligence

SOC operations

Cloud security

Security monitoring

Stakeholder engagement

Education

Bachelor's degree in Information Security

Tools

SIEM

EDR/XDR

Threat intel platforms

Cloud security monitoring

Job description

Let's Write Africa's Story Together! Old Mutual is a firm believer in the African opportunity and our diverse talent reflects this.

Job Description

The purpose of this role is to provide technical security expertise and assurance across all technical components of the Security Operations Centre (SOC) service, ensuring that Old Mutual retains effective ownership, governance, and accountability for SOC capabilities delivered through a third‑party service provider. The role is accountable for conducting technical assessments, technical verification, and technical approvals across SOC tooling, architecture, detection engineering, and incident handling processes, while identifying and articulating technical gaps, risks, and improvement opportunities. In addition, the role provides hands‑on technical support to Old Mutual’s cloud infrastructure as an extension of the Cloud Security team, ensuring SOC and cloud security controls are aligned, effective, and fit‑for‑purpose within Old Mutual’s technology landscape. The role will be a Manager of Self with oversight of the SOC Service Provider engaging both internal and external stakeholders.

Key Responsibilities / Accountabilities

• Operational & Technical Assurance
• Governance, Oversight & Decision Support
• Stakeholder & Service Provider Engagement
• Building threat intelligence framework to protect the network
• SOC Platform and Services
• Support Personal Capability & Professional Development

Maintain up‑to‑date expertise in SOC technologies, cloud security, threat detection engineering, and incident response practices. Pursue continuous professional development through relevant certifications, industry forums, and threat intelligence awareness. Contribute to continuous improvement of Old Mutual’s internal technical security knowledge base and practices.

Decision‑Making Authority & Scope

Independent authority: Conduct technical assessments, technical verification, and technical approvals within agreed security and architecture frameworks. Identify and formally raise technical risks, gaps, and control weaknesses with supported evidence and recommendations. Decisions requiring driving, consultation or escalation: Material architectural changes, tooling replacements, or significant risk acceptances must be escalated to senior security and technology leadership for approval. Impact & scope: Influences SOC effectiveness, maturity, detection quality, and overall security resilience.

Minimum Requirements

• Bachelor's degree in Information Security, Computer Science, Information Technology, Engineering, or a related discipline.
• Minimum 5 years' experience in Cyber Security, with at least 3 years focused on Threat Intelligence, Security Operations Centre (SOC), Threat Detection Engineering, or Incident Response.
• Proven experience working with enterprise security technologies including SIEM, EDR/XDR, threat intelligence platforms, and security monitoring tools.
• Experience developing and operationalising threat intelligence capabilities, including threat hunting, adversary tracking, indicators of compromise (IOCs), and threat-led detection use cases.
• Demonstrated experience supporting or overseeing managed security service providers (MSSPs) or outsourced SOC providers.
• Hands‑on experience securing cloud platforms, preferably Microsoft Azure, including cloud‑native security monitoring and incident investigation.
• Understanding of cyber security frameworks and standards such as NIST Cybersecurity Framework, MITRE ATT&CK, ISO 27001, and CIS Controls.
• Experience performing technical security assessments, validating security controls, identifying security risks, and providing remediation recommendations.
• Strong stakeholder engagement skills with the ability to communicate technical security risks and recommendations to both technical and non-technical audiences.

Skills

• Adaptive Thinking
• Application Development
• Computer Literacy
• Confidentiality
• Data Compilation
• Data Compression
• Data Controls
• Data Modeling
• Data Privacy
• Data Recovery
• Digital Literacy
• Gateway Servers
• IT Network Security
• Probing Questions
• Test Case Management Competencies Action Oriented Communicates Effectively Cultivates Innovation Ensures Accountability Manages Complexity Nimble Learning Optimizes Work Processes Persuades Education

NQF Level 7 - Degree, Advance Diploma or Postgraduate Certificate or equivalent (Required)

Closing Date

17 November 2026 , 23:59

The appointment will be made from the designated group in line with the Employment Equity Plan of Old Mutual South Africa and the specific business unit in question.

The Old Mutual Story!

Old Mutual is a premium African financial services organisation that offers a broad spectrum of financial solutions to retail and corporate customers across key market segments in 14 countries. The lines of business include Life and Savings, Property and Casualty, Asset Management and Banking and Lending. We are rooted in our purpose of Championing Mutually Positive Futures Every Day and believe that a great customer experience is anchored in a great employee experience.