CYBER SECURITY ENGINEER - JOHANNESBURG

Introduction

About the Opportunity

Our client is a well-established, independent and privately owned financial services organisation, known for the calibre of its people, a strong focus on diversity and inclusion, and collaborative partnerships. They are seeking an experienced Cyber Security Engineer to join their Cyber Security Support and Enablement team in Johannesburg.

Duties & Responsibilities

• Triage identity-related tickets and incidents (e.g. sign-in failures, MFA and Conditional Access issues, account lockouts, privileged access requests), resolving at first contact wherever possible

• Support access control reviews and identity-related security tasks

• Contribute to security tooling configuration and maintenance

• Collaborate with internal teams to implement security improvements

• Ensure activities align with the organisation's cyber security framework, policies and standards

• Participate in continuous improvement initiatives within Cyber Operations

• Minimum 3–5 years' experience in cybersecurity operations, security engineering or related IT roles

• Demonstrated experience troubleshooting identity and access issues in Microsoft environments (Entra ID, Active Directory, Microsoft 365) within a ticket-based operational support model

• Exposure to security monitoring, incident response or vulnerability management

• Experience in regulated or enterprise environments is advantageous

Security Principles and Frameworks

• Strong understanding of security fundamentals: authentication, authorisation, encryption, network security and defence-in-depth

• Understanding of Zero Trust principles and architecture, including identity-centric security, least privilege access, micro-segmentation and continuous verification

• Knowledge of cloud security principles, including shared responsibility models, cloud-native security controls and secure configuration management

• Knowledge of cybersecurity frameworks, standards and best practices (e.g. NIST, ISO 27001, CIS Controls)

Technical Skills

• Strong analytical and problem-solving skills

• Ability to interpret and troubleshoot security configurations and policies

• Solid understanding of IAM and cloud security controls

• Familiarity with Agile delivery environments

• Proficiency with ITSM ticketing and collaboration tools (e.g. ServiceNow, Jira Service Management, Azure Boards, Confluence)

• Sound triage judgement: able to quickly assess impact and urgency, resolve independently, and know when and where to escalate

Technology Experience (Advantageous)

• Identity platforms: Entra ID, Active Directory, SailPoint, BeyondTrust and Silverfort

• Cloud security: Azure security services, including Entra Conditional Access, Privileged Identity Management (PIM), Entra ID Protection, Microsoft Defender for Identity and Azure Key Vault

• Privileged Access Management: Just-in-Time (JIT) access and Just Enough Administration (JEA)

• Knowledge of Active Directory security assessment tools such as BloodHound and DSInternals to identify attack paths, misconfigurations and credential risks

• Scripting and automation skills using PowerShell and Python to streamline security operations, reporting and remediation

Desired Experience & Qualification

• Tertiary qualification in Computer Science, Cybersecurity, Information Technology or a related discipline (preferred but not essential)

• Microsoft certifications highly regarded, particularly SC-300 (Identity and Access Administrator Associate); SC-200 (Security Operations Analyst Associate) and SC-500 (Cloud and AI Security Engineer Associate, successor to AZ-500) also valued

• Security operations or engineering certifications (e.g. CompTIA Security+, CySA+, GIAC) valued

• CISSP or similar professional certification desirable

• Certifications in specific technology platforms (SailPoint, BeyondTrust, Azure, etc.) advantageous