Cyber Security Operations Engineer

About the role

Join a global investment advisory firm as a Cyber Security Operations Engineer, working in a hybrid environment in Cape Town. You will be part of a high‑performing cyber security function that leverages automation, AI and modern tools to protect the organisation’s assets.

Key responsibilities

• Manage daily security operations, including ticket handling, monitoring internal and managed SOC tools, and investigating incidents.
• Execute major incident response, runbooks, and monitor threat feeds.
• Configure and operate core security solutions such as EDR, SWG, UEBA, SEG, PAM and SSO.
• Implement technical security standards and oversee the vulnerability management process.
• Provide security advice for projects, contribute to designs and policies, and ensure secure cloud service implementations.
• Research emerging threats and vulnerabilities, and support security awareness programs through training, phishing tests and communications.

Required profile

• Minimum 5 years of experience in Security Operations or a similar role.
• Strong technical expertise in security monitoring, detection, prevention and control systems.
• Hands‑on experience with incident response planning and execution.
• Deep knowledge of Azure, Microsoft 365, OWASP Top 10, SANS Top 20 and the MITRE ATT&CK framework.
• Familiarity with ISO 27001:2022, data‑handling best practices and GDPR, especially within the financial sector.
• Ability to stay current with evolving threat actor TTPs and mitigation techniques.

Required skills

• Azure
• Microsoft 365
• EDR
• SWG
• UEBA
• SEG
• PAM
• SSO
• Vulnerability management
• Threat intelligence
• Cloud security
• ISO 27001
• GDPR
• OWASP Top 10
• MITRE ATT&CK

What we offer

• Hybrid work model (office and remote).
• Industry‑leading benefits and wellness programs.
• Strong career development opportunities within a large, innovative organisation.
• Access to cutting‑edge tools, AI and automation resources.