Cyber Security Specialist

Reference: JHB000813-KP-1

Gijima Staffing Solutions is recruiting on behalf of a client for an experienced Cybersecurity Engineer / Specialist to join a high-performing IT Security team. This is an exciting opportunity for a cybersecurity professional with strong hands-on experience in Microsoft Security technologies, Fortinet solutions, Varonis, and enterprise security operations. Contract Duration: 12 Months (with the possibility of extension) Probation Period: 3 Months Location: Centurion (Hybrid) Duties & Responsibilities

Purpose of the Role The successful candidate will be responsible for supporting and maintaining the organisation's cybersecurity environment, ensuring the availability, integrity, monitoring, performance, and security of business-critical systems. You will play a key role in strengthening the overall cybersecurity posture, supporting compliance requirements, and driving continuous improvement across enterprise security technologies.

Key Responsibilities

• Administer, support, and maintain the Microsoft Security ecosystem, including Defender XDR, Entra ID, Purview, Intune, Multi-Factor Authentication (MFA), and Security Copilot.

• Configure, manage, and optimise FortiGate Firewalls and FortiClient VPN solutions.

• Support and administer ManageEngine solutions, including ADManager, ServiceDesk, and Endpoint Central.

• Monitor and maintain Varonis Data Security solutions, including data discovery, classification, threat detection, risk analysis, compliance monitoring, and insider threat detection.

• Review Security Operations Centre (SOC) and SIEM alerts and ensure appropriate remediation actions are implemented.

• Implement and maintain cybersecurity controls across infrastructure and enterprise environments.

• Perform vulnerability assessments, patch management, access management, and security monitoring.

• Manage firewall security, antivirus updates, domain security, and network security architecture.

• Support IT projects, system upgrades, renewals, and change management activities.

• Prepare cybersecurity reports, governance documentation, technical documentation, and audit evidence.

• Develop cybersecurity standards, procedures, and best practices to improve the overall security posture.

• Collaborate with infrastructure, application, and security teams to deliver secure technology solutions.

• Assist with cybersecurity awareness initiatives and compliance training material, including KnowBe4 content.

Minimum Requirements

• 3–5 years' experience in Cybersecurity Engineering, IT Security Operations, Infrastructure Security, or a related field.

• Relevant IT Diploma or Degree (advantageous).

• Microsoft Security Certification such as SC-200, SC-300, SC-400, or equivalent.

• Strong practical experience with:

• Microsoft Defender XDR

• Microsoft Entra ID

• Microsoft Purview

• Microsoft Intune

• Multi-Factor Authentication (MFA)

• Microsoft Security Copilot

• Proven experience with FortiGate Firewalls and FortiClient VPN.

• Experience with Varonis Data Security solutions.

• Experience administering ManageEngine products, including ADManager, ServiceDesk, and Endpoint Central.

• Good understanding of:

• Identity and Access Management (IAM)

• Vulnerability Management

• Risk Management

• Security Incident Response

• Knowledge of regulatory and cybersecurity frameworks, including:

• ISO 2700x

• NIST

• COBIT

• POPIA

• GDPR

• PCI-DSS

• SOC 2

• ITIL

• Knowledge of SOX compliance and SOX IT General Controls (ITGC).

Advantageous Certifications

• CISA

• CISM

• CRISC

• CGEIT

• CEH

• CPTE

• CISSP

• AWS Security Certifications

• Fortinet NSE Certification

• CompTIA Security+

Competencies

• Strong analytical and problem-solving skills.

• Passion for cybersecurity and continuous learning.

• Excellent communication and stakeholder engagement skills.

• Ability to work independently and collaboratively within cross-functional teams.

• Strong attention to detail and accountability.

• Business and organisational awareness.

• Proactive approach to identifying and mitigating cyber risks.