Junior Security Engineer – Umhlanga
Hybrid Role
Role Purpose
The purpose of the role of the Jr Security Engineer is to maintain and monitor the overall security of ‘back of house’ technologies and corporate systems. The role holder will be required to implement appropriate security and infrastructure technologies to deliver customer solutions and satisfaction, and to ensure all tools are configured and rules maintained.
The core domain of this role is the integration of technology and systems covering the below in order to deliver a slick, accessible, yet secure service with great employee experience and up-to-date manageable rules, configurations and policies as approved by the Technology Director:
• Identity management / device access controls including multi-factor authentication via on-site and remote access
• Device security and malware avoidance
• Single Sign-on/SAML
• Mail Security (Inbound / Outbound)
• Network Security & Monitoring
• IPS/IDS
• DLP (Data Loss Prevention)
• Technology related security incidents
• Infrastructure issues and projects
• Privileged account logging and control
• Data sovereignty
Job Description:
• Implement automation through scripting to reduce false alerts, manual checks, increase productivity and accuracy
• Implement and monitor security measures for the protection of computer systems, networks and information.
• Identify and define system security weaknesses and requirements.
• Prepare, document and follow standard operating procedures and protocols.
• Configure and troubleshoot security infrastructure devices.
• Analyse new security tools to help mitigate security vulnerabilities and automate repeatable tasks.
• Ensure that the company knows as much as possible, as quickly as possible about security incidents.
• Work positively with the other Technology teams to ensure end-to-end customer satisfaction with the technology services to employees.
• Ensure that tickets picked up are responded to quickly, professionally and courteously and effectively manage within agreed service level agreements (SLA).
• Continue to review and improve the technology solution or knowledge base allowing issues to be fixed on first touch and minimising client downtime.
• Ensure the company’s computing facilities are kept secure to reduce the risk of breaches of confidentiality, integrity and availability.
• Ensure IT projects are progressed professionally and in a timely manner, ensuring projects are delivered on time and to budget.
Essential Skills:
• Scripting experience (PowerShell and Python preferred, utilising SOAP and REST API technologies)
• An understanding of the latest security principals, techniques and protocols.
• Understanding of a Microsoft Windows Active Directory environment.
• Technical knowledge of database and operating system security.
• Experience with network technologies and with system, security, and network monitoring tools.
• Experience with Mail Security and Web Filtering technologies
• Familiarity with web related technologies (Web Applications, Web Services, Service Oriented Architectures) and of network/web protocols.
• Understanding of firewall/IPS/IDS principles and practices.
• Good understanding of the Microsoft Windows and Office security and patching practices (Ivanti/Shavlik desirable).
• Experience of Linux (Centos/RedHat preferred)
• Be able to demonstrate excellent problem management skills.
• Excellent business communication skills
• Excellent time management and prioritisation skills
Desirable Skills:
• Be able to demonstrate an expert understanding of the major Microsoft packages namely Microsoft Windows and Office, including licencing and cloud services.
• Any of the following IT qualifications; CompTIA A+, Microsoft Certified IT Professional (MCITP).
• Experience of working with ISO27001:2013 onwards.
• Experience in Financial Services or working in a regulated and secure environment.
• Degree in a relevant subject.
• Full and clean driving license.
• Experience of security services in large organisations.
• Experience in maintaining security systems and infrastructure.
• Familiarity with Identity Management / device access controls including multi-factor authentication.
