About the position
We are seeking a Senior Information Security Engineer to design, implement, and lead advanced security solutions across hybrid on-prem and cloud environments (Azure, Microsoft 365).
Key Responsibilities
1. Security Architecture & Engineering
- Design and implement advanced security controls across on-prem, cloud, and SaaS environments (Azure, Microsoft 365).
- Define and enforce security architecture standards.
- Lead secure SDLC initiatives and application security assessments.
- Configure and maintain enterprise firewalls and Web Application Firewalls (WAF).
2. Security Operations Leadership
- Oversee and optimize security platforms (Firewalls, SIEM, EDR, DLP, Vulnerability Management).
- Develop automation for threat detection and response integrated with ITSM tools.
- Define operational playbooks and mentor junior engineers.
- Manage and govern outsourced SOC services, SLAs, and performance metrics.
3. Incident Response & Threat Management
- Lead major incident investigations, forensic analysis, and root cause analysis.
- Act as escalation point for critical security incidents.
- Drive proactive threat hunting initiatives.
4. Vulnerability & Patch Management
- Define vulnerability management strategy.
- Ensure timely remediation of critical risks.
- Deliver executive-level risk and remediation reporting.
5. Identity & Access Management
- Architect enterprise identity governance using Microsoft Entra ID (Azure AD).
- Implement privileged access management and Zero Trust principles.
6. Security Awareness
- Design and deliver enterprise-wide security awareness programs.
- Measure effectiveness and report outcomes to leadership.
7. Compliance & Risk Advisory
- Ensure alignment with ISO 27001, NIST CSF, CIS Benchmarks, POPIA, GDPR, FSCA.
- Lead technical audits, penetration tests, and red/blue team exercises.
8. Reporting & Executive Engagement
- Deliver security dashboards, metrics, and board-level reporting.
- Recommend and track continuous security posture improvements.
- Produce detailed firewall and WAF configuration and performance reports.
Qualifications & Experience
Education & Certifications
- Diploma or Bachelor’s Degree in IT, Computer Science, or related field.
- CISSP, CISM, or equivalent senior-level certification.
- Microsoft Cybersecurity Architect Expert or SC-series certification
Desired Skills:
- Security
- Cybersecurity
- SIEM
- Infrastructure
- Azure
Desired Qualification Level:
About The Employer:
