Principle Cyber Security Engineer

Duties & Responsibilities

AI- and automation-first mindset

Design, improve, and scale security controls across cloud, endpoint, and identity environments

Lead complex investigations and drive proactive threat detection

Mentor junior Engineers, and partner with Technology and Business teams to continuously strengthen the organisation’s security posture

Technical Skills

Deep expertise in AWS security services (CloudTrail, GuardDuty, Config, Security Hub)

Strong experience with Azure security tooling (Sentinel, Defender, Security Center)

Advanced knowledge of EDR/XDR platforms and endpoint telemetry

Hands-on experience with SIEM, SOAR, and log analytics platforms

Strong understanding of networking, IAM, authentication protocols, and attack vectors

Python, PowerShell, or Bash for automation and analysis

Experience applying threat hunting and detection engineering methodologies

Familiar with AI-driven security tooling and prompt-based analysis

Certifications (Preferred)

CISSP, CISM, or equivalent senior-level certification

AWS Security Specialty and / or Azure Security Engineer Associate

GIAC certifications (GCIH, GCFA, GNFA, GCED)

CySA+ or advanced SANS training

Required Skills & Competencies, Analytical & Technical

Proficient in threat intelligence analysis and application

Strong understanding of modern attack frameworks and adversary behaviour (MITRE ATT&CK, Cyber Kill Chain)

Knowledge of compliance frameworks (SOC 2, ISO 27001, NIST)

Experience in AI platforms and prompts

Expert-level analytical and problem-solving skills

Able to work under pressure during major incidents

Translate complex technical findings into business-relevant insights

Communication & Leadership

Excellent written and verbal communication skills

Brief senior stakeholders and executives during incidents

Strong documentation and reporting capabilities

Collaborative leadership style with the ability to influence without authority

Personal Attributes

Self-driven and accountable, with strong ownership mindset

Passion for continuous learning and staying ahead of emerging threats

Comfortable operating in ambiguous, fast-paced environments

Willingness to support on-call or incident response rotations as required

Security Monitoring, Engineering & Analysis

Lead advanced monitoring and analysis of security events across AWS, Azure, and endpoint platforms

Design, enhance, and optimise detection logic using CloudTrail, GuardDuty, Security Hub, Azure Sentinel, Defender, and EDR / XDR tools

Identify security gaps, misconfigurations, and control weaknesses across cloud and SaaS environments

Develop and maintain automated detection and response workflows using scripting and SOAR principles

Perform deep analysis of DLP alerts, ensuring protection of sensitive and regulated data

Incident Response, Forensics & Crisis Management

Lead investigator for high-severity security incidents

Drive end-to-end incident response activities, including containment, eradication, and recovery

Advanced host, cloud, and log-based forensic analysis

Produce executive-level incident reports, root-cause analyses, and post-incident improvement plans

Support tabletop exercises, incident simulations, and continuous improvement of IR playbooks

Threat Detection, Hunting & Intelligence

Lead proactive threat hunting activities using behavioural analytics and threat intelligence

Map detections to MITRE ATT&CK and continuously improve coverage

Advanced malware analysis and support reverse-engineering efforts

Translate threat intelligence into actionable detections and preventive controls

Remain ahead of emerging attack techniques, cloud-native threats, and identity-based attacks

Identity, Access & Privileged Security

Monitor and investigate privileged access and identity-based threats

Lead IAM security reviews and contribute to least-privilege and zero-trust initiatives

Investigate anomalous authentication behaviour and insider-risk indicators

Partner with IAM teams to strengthen identity security architecture and controls

Security Engineering, Architecture & Enablement

Design and improvement of cloud and enterprise security architectures

Define security requirements for new platforms, services, and integrations

Support compliance initiatives aligned to ISO 27001, SOC 2, NIST, PCI DSS and internal risk frameworks

Mentor junior Engineers and Analysts, provide technical guidance and review

Influence security strategy through technical insight and data-driven recommendations

Desired Experience & Qualification

7 –10+ years of hands-on experience in cybersecurity engineering, SOC, or security operations roles

Experience leading complex security investigations and incident response

Strong background in cloud security engineering (AWS and Azure)

Proven ability to design, tune, and maintain security detections at scale

Experience mentoring or technically leading other Security Practitioners

Bachelor’s degree in Cybersecurity / Computer Science / Information Technology / or related field

Equivalent practical experience will be considered

Interested?

POPI

By applying for this position, you consent in terms of the Protection of Personal Information Act (POPI Act)

to your personal information being obtained; utilised and stored by the Company through inter alia,

reference checks, credit checks and trace reports.

Should you not hear from us within 7 days, please consider your application unsuccessful