Information Security Engineer

  • Johannesburg, South Africa
  • Contractor
  • On-Site

Job Description:

The Information Security Engineer is responsible for safeguarding information systems against unauthorised access, modification and destruction. The role combines hands-on security operations with secure network and systems architecture, proactive threat detection, vulnerability management and incident response.

Key Responsibilities

  • Design, implement and maintain security infrastructure across the organisation.
  • Develop and deploy secure network architectures and system configurations.
  • Implement and manage security platforms and tools used to protect systems and data.
  • Continuously monitor networks and systems for potential security threats.
  • Conduct security assessments, vulnerability scans and penetration testing.
  • Identify, analyse and respond to security incidents.
  • Establish and maintain incident-response procedures and protocols.
  • Investigate security breaches and implement corrective actions to reduce recurrence.
  • Develop automated solutions to mitigate vulnerabilities and improve security operations.
  • Work with IT teams to define and enforce security standards, controls and configurations.
  • Support the selection and deployment of appropriate security technologies.
  • Ensure compliance with internal policies and applicable regulatory requirements.
  • Educate employees on information-security policies, procedures and good practices.

Minimum Requirements

  • Bachelor's degree in Computer Science, Information Security or a related field, or equivalent experience.
  • Proven experience as an Information Security Engineer or in a similar role.
  • Hands-on experience with penetration testing and security-assessment techniques.
  • Strong understanding of firewalls, proxies, SIEM, antivirus and intrusion detection/prevention systems.
  • Experience identifying, analysing and mitigating network vulnerabilities.
  • Working knowledge of programming or scripting languages such as Python, SQL, Perl, Ruby or Go.
  • Strong knowledge of networking infrastructure and protocols, including routing, firewalls, IDS/IPS, encryption and load balancing.
  • Experience with Active Directory and Linux system administration.
  • Proficiency with vulnerability-management and security tools such as Greenbone, OpenVAS, Nessus, Intune or PingCastle.
  • Current knowledge of cybersecurity threats, trends and risk-management practices.

Advantageous Experience

  • Relevant certifications such as CISSP, CISM, CEH, CompTIA Security+, GSEC or similar.

Key Competencies

  • Strong analytical and problem-solving ability.
  • Ability to perform accurately under pressure during security incidents.
  • Excellent communication and presentation skills.
  • Ability to translate technical security concepts for non-technical stakeholders.
  • Strong project-management and prioritisation skills.

If you meet the requirements and would like to be considered for this opportunity, please submit your application through the link provided. Only candidates who meet the role requirements will be contacted.