Cyber Security Operations Engineer

About the role

A global investment advisory firm focused on long-term value creation is hiring a Cyber Security Operations Engineer in Cape Town, on a 12-month contract. The role is hybrid or remote, and the client offers daily office attendance or a hybrid in-office/remote arrangement. The firm invests heavily in employee wellness and benefits, and uses automation, AI and R&D to avoid legacy software.

Key responsibilities

• Manage daily security operations: handle support tickets, monitor internal and managed SOC tools, investigate incidents, run major incident response, follow runbooks and monitor threat feeds.
• Configure and operate core security tools (EDR, SWG, UEBA, SEG, PAM, SSO), implement technical security standards, give input on security posture and manage the vulnerability management process.
• Provide technical security advice for projects (control design, process review, SSDLC input), help with security designs and policies, ensure secure cloud implementation and research emerging threats and vulnerabilities.
• Support security awareness programmes through staff training, phishing tests and intranet announcements about new threats.

Required profile

• Minimum 5 years in a Security Operations or similar role with strong technical expertise across monitoring, detection, prevention and control.
• Hands-on experience with security incident response planning and keeping it effective.
• Knowledge of industry standards such as ISO 27001:2022, data handling best practices and global data protection laws such as GDPR, especially in the financial sector.
• Ability to stay up to date with threat actor TTPs and mitigations, and a commitment to ethics, compliance and urgency.

Required skills

• Azure and Microsoft 365
• OWASP Top 10, SANS Top 20 and MITRE ATT&CK framework (Microsoft or SANS certification desirable)
• EDR, SWG, UEBA, PAM and SSO tools