Information Security Engineer
Level-Up
- Johannesburg, Gauteng
- Permanent
- Full-time
- Design, implement, and maintain the organisation's security infrastructure.
- Conduct regular system tests and ensure continuous monitoring of network security.
- Develop technical solutions and new security tools to help mitigate security vulnerabilities and automate repeatable tasks.
- Ensure that the company knows as much as possible, as quickly as possible about security incidents.
- Establish protocols and procedures for responding to security breaches.
- Train staff on network and information security procedures.
- Work closely with the IT department to select and deploy technical controls to meet specific security requirements and define processes and standards to ensure that security configurations are maintained.
- Bachelors degree in Computer Science, Information Security, or a related field, or equivalent work experience
- Preferred certifications: CISSP, CISM, CEH, CompTIA Security+, GSEC, or similar.
- Proven work experience as an Information Security Engineer or similar role.
- Experience with computer network penetration testing and techniques.
- Understanding of firewalls, proxies, SIEM, antivirus, and IDPS concepts.
- Ability to identify and mitigate network vulnerabilities and explain how to avoid them.
- Experience with or knowledge of programming languages such as Python, Perl, SQL, Ruby, or Go.
- Strong understanding of networking protocols and infrastructure designs; including routing, firewall functionality, host and network intrusion detection systems, encryption, load balancing, and other network protocols.
- Proficient in managing and configuring Active Directory and Linux operating systems.
- Hands-on experience with security tools such as Greenbone (OpenVAS), Intune, and Ping Castle.
- Knowledge of the latest trends in information security and risk management.
- Excellent problem-solving skills and ability to work under pressure.
- Strong communication and presentation skills.
- Ability to educate a non-technical audience about various security measures.
- Effective project management skills and the ability to prioritise tasks.