Information Security Engineer

About the role

A well‑established organisation is seeking an experienced Information Security Engineer to join its technology team on a permanent basis. This role is responsible for safeguarding the organisation’s data, systems, and networks against evolving cyber threats. The successful candidate will play a key role in strengthening the security posture, enhancing governance frameworks, and proactively managing risks across on‑premise and cloud environments.

Key responsibilities

• Analyse, research and report on potential threats, vulnerabilities and weaknesses across IT systems, applications and networks.
• Conduct risk assessments and vulnerability management, recommending and implementing mitigation strategies.
• Implement and maintain security best practices aligned to frameworks such as ISO 27001, NIST CSF, PCI‑DSS and POPIA.
• Investigate, contain and eradicate security incidents, including root‑cause analysis and post‑incident reviews.
• Monitor network environments and manage service providers to ensure security SLAs are met.
• Administer and maintain security hardware and software including firewalls, endpoint protection and IDS/IPS.
• Develop and maintain SOC/SIEM detection rules, dashboards and incident playbooks.
• Support internal and external audits and maintain security documentation such as risk registers and incident reports.

Required profile

• Minimum 5 years’ experience in information and cybersecurity roles.
• Grade 12 (Matric) and a National Certificate or Bachelor’s Degree in IT, Computer Science or equivalent.
• Relevant certifications such as CompTIA A+, N+, Security+ and CEH are highly advantageous.
• Strong understanding of security controls across network, application, cloud and endpoint environments.
• Excellent communication skills with the ability to translate technical risk into business impact.

Required skills

• Python
• PowerShell
• Bash
• Firewalls
• Endpoint protection
• Intrusion detection systems
• Intrusion prevention systems
• SOC
• SIEM platforms
• Azure
• AWS
• Office 365
• Kali Linux
• Penetration testing tools
• Vulnerability scanning solutions
• Network troubleshooting
• VPN
• Antivirus
• Authentication
• Content filtering
• IDS
• IPS
• Windows Server
• Linux

What we offer

• Hybrid working model.
• Permanent role with long‑term growth potential.
• Exposure to enterprise‑level security environments.
• Market‑related remuneration based on experience.