Senior Information Security Engineer

About the role

A growing financial services organization is looking for a strategic technical leader to support both on-premises and cloud-based environments. This permanent role is based in Waterfall, Midrand, and is available immediately. The successful candidate will design, implement and optimise advanced security architectures across hybrid infrastructure, applications and cloud environments, while collaborating with IT leadership to strengthen the enterprise security strategy and meet global standards and regulatory requirements.

Key responsibilities

• Design and implement security controls across on-prem, cloud and SaaS environments, including Azure and Microsoft 365; set security architecture standards, maintain enterprise firewalls and manage WAF solutions.
• Oversee and optimise SIEM, EDR, DLP and vulnerability management tools, develop automation for threat detection, integrate SOC services and manage SLAs for outsourced SOC providers.
• Act as escalation point for critical incidents, lead major investigations and forensic analysis, and drive proactive threat hunting.
• Enforce identity governance with Microsoft Entra ID (Azure AD), implement zero-trust principles and define vulnerability management strategies.
• Ensure alignment with ISO 27001, NIST CSF, CIS benchmarks, POPIA, GDPR and FSCA regulations, and lead technical audits, penetration tests and red/blue team exercises.
• Deliver board-level presentations, risk dashboards and configuration reports, and run security awareness programmes.

Required profile

• Diploma or Bachelor's degree in IT, Computer Science or a related field.
• CISSP, CISM or equivalent senior certification, plus Microsoft Cybersecurity Architect Expert or SC-series certification.
• 7+ years in cybersecurity or security engineering, with at least 3 years in a senior or lead capacity.
• Excellent communication with executives and technical teams, strong troubleshooting, ITSM tool proficiency and mentoring ability.

Required skills

• Expert knowledge of SIEM, EDR, firewalls and DLP platforms.
• Scripting with PowerShell and Python, identity governance, zero-trust architecture and cloud security.
• Preferred: Hillstone, NGINX, Microsoft Intune, Microsoft Purview and various SIEM solutions.