Threat Intelligence Engineer

Old Mutual Limited; Johannesburg; Hybrid; ZAR 900,000 - 1,400,000; Full time

Job summary

Old Mutual Limited is seeking a Threat Intelligence Engineer to lead technical security across the SOC and cloud security. You will oversee assessments, tooling, detection engineering, and incident handling while coordinating with internal teams and third-party providers.

You will maintain up-to-date expertise in SOC technologies, threat hunting, and industry standards; pursue professional development and contribute to knowledge sharing across the organization.

Qualifications

• Bachelor's degree in information security, computer science, IT, engineering or related field.
• Minimum 5 years' cyber security experience with 3+ years in threat intelligence, SOC, threat detection engineering or incident response.
• Experience with enterprise security tech including SIEM, EDR/XDR and threat intel platforms.

Responsibilities

• Provide governance, oversight and decision support for SOC services.
• Build and operationalise threat intelligence framework and IOC-driven detections.
• Engage with internal stakeholders and MSSPs to improve security controls.
• Support cloud security and incident investigations acrossAzure environments.

Skills

Threat Intelligence

SOC operations

Threat hunting

Incident response

Cloud security

Azure security

SIEM

EDR/XDR

MSSP oversight

Stakeholder engagement

Education

Bachelor's degree in Information Security/CS/IT/Engineering

Tools

SIEM

EDR/XDR

Threat intel platform

Cloud monitoring tools

Job description

Threat Intelligence Engineer page is loaded## Threat Intelligence Engineerremote type: Hybridlocations: Cape Town: Johannesburgtime type: Full timeposted on: Posted Todayjob requisition id: JR-85292**Let's Write Africa's Story Together!**Old Mutual is a firm believer in the African opportunity and our diverse talent reflects this.**Job Description**The purpose of this role is to provide technical security expertise and assurance across all technical components of the Security Operations Centre (SOC) service, ensuring that Old Mutual retains effective ownership, governance, and accountability for SOC capabilities delivered through a third-party service provider.The role is accountable for conducting technical assessments, technical verification, and technical approvals across SOC tooling, architecture, detection engineering, and incident handling processes, while identifying and articulating technical gaps, risks, and improvement opportunities.In addition, the role provides hands-on technical support to Old Mutual's cloud infrastructure as an extension of the Cloud Security team, ensuring SOC and cloud security controls are aligned, effective, and fit-for-purpose within Old Mutual's technology landscape.The role will be a Manager of Self with oversight of the SOC Service Provider engaging both internal and external stakeholders.**Key Responsibilities / Accountabilities*** Operational & Technical Assurance* Governance, Oversight & Decision Support* Stakeholder & Service Provider Engagement* Building threat intelligence framework to protect the network* SOC Platform and Services Support**Personal Capability & Professional Development*** Maintain up-to-date expertise in SOC technologies, cloud security, threat detection engineering, and incident response practices.* Pursue continuous professional development through relevant certifications, industry forums, and threat intelligence awareness.* Contribute to continuous improvement of Old Mutual's internal technical security knowledge base and practices.**Decision-Making Authority & Scope**Independent authority:Conduct technical assessments, technical verification, and technical approvals within agreed security and architecture frameworks.Identify and formally raise technical risks, gaps, and control weaknesses with supported evidence and recommendations.Decisions requiring driving, consultation or escalation:Material architectural changes, tooling replacements, or significant risk acceptances must be escalated to senior security and technology leadership for approval.Impact & scope:Influences SOC effectiveness, maturity, detection quality, and overall security resilience.**Minimum Requirements:*** Bachelor's degree in Information Security, Computer Science, Information Technology, Engineering, or a related discipline.* Minimum 5 years' experience in Cyber Security, with at least 3 years focused on Threat Intelligence, Security Operations Centre (SOC), Threat Detection Engineering, or Incident Response.* Proven experience working with enterprise security technologies including SIEM, EDR/XDR, threat intelligence platforms, and security monitoring tools.* Experience developing and operationalising threat intelligence capabilities, including threat hunting, adversary tracking, indicators of compromise (IOCs), and threat-led detection use cases.* Demonstrated experience supporting or overseeing managed security service providers (MSSPs) or outsourced SOC providers.* Hands-on experience securing cloud platforms, preferably Microsoft Azure, including cloud-native security monitoring and incident investigation.* Understanding of cyber security frameworks and standards such as NIST Cybersecurity Framework, MITRE ATT&CK, ISO 27001, and CIS Controls.* Experience performing technical security assessments, validating security controls, identifying security risks, and providing remediation recommendations.* Strong stakeholder engagement skills with the ability to communicate technical security risks and recommendations to both technical and non-technical audiences.**Skills**Adaptive Thinking, Application Development, Computer Literacy, Confidentiality, Data Compilation, Data Compression, Data Controls, Data Modeling, Data Privacy, Data Recovery, Digital Literacy, Gateway Servers, IT Network Security, Probing Questions, Test Case Management**Competencies**Action Oriented######Communicates Effectively######Cultivates Innovation######Ensures Accountability######Manages Complexity######Nimble Learning######Optimizes Work Processes######Persuades**Education**NQF Level 7 - Degree, Advance Diploma or Postgraduate Certificate or equivalent (Required)**Closing Date**17 November 2026, 23:59***The appointment will be made from the designated group in line with the Employment Equity Plan of Old Mutual South Africa and the specific business unit in question.******The Old Mutual Story!***A network error caused the media download to fail part-way.Old Mutual is a premium African financial services organisation that offers a broad spectrum of financial solutions to retail and corporate customers across key market segments in 14 countries. The lines of business include Life and Savings, Property and Casualty, Asset Management and Banking and Lending.We are rooted in our purpose of Championing Mutually Positive Futures Every Day and believe that a great customer experience is anchored in a great employee experience.