Information Security Engineer Johannesburg

Information Security Engineer

The Information Security Engineer will be responsible for ensuring the security of our information systems and protecting them against unauthorized access, modification, or destruction.

The role involves hands-on operations with various security tools and platforms, as well as the development and implementation of secure networks and systems.

Duties & Responsibilities

1. Design, implement, and maintain the organisation's security infrastructure.
2. Conduct regular system tests and ensure continuous monitoring of network security.
3. Develop technical solutions and new security tools to help mitigate security vulnerabilities and automate repeatable tasks.
4. Ensure that the company knows as much as possible, as quickly as possible about security incidents.
5. Establish protocols and procedures for responding to security breaches.
6. Train staff on network and information security procedures.
7. Work closely with the IT department to select and deploy technical controls to meet specific security requirements and define processes and standards to ensure that security configurations are maintained.

Desired Experience & Qualification

1. Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent work experience.
2. Preferred certifications: CISSP, CISM, CEH, CompTIA Security+, GSEC, or similar.
3. Proven work experience as an Information Security Engineer or similar role.
4. Experience with computer network penetration testing and techniques.
5. Understanding of firewalls, proxies, SIEM, antivirus, and IDPS concepts.
6. Ability to identify and mitigate network vulnerabilities and explain how to avoid them.
7. Experience with or knowledge of programming languages such as Python, Perl, SQL, Ruby, or Go.
8. Strong understanding of networking protocols and infrastructure designs; including routing, firewall functionality, host and network intrusion detection systems, encryption, load balancing, and other network protocols.
9. Proficient in managing and configuring Active Directory and Linux operating systems.
10. Hands-on experience with security tools such as Greenbone (OpenVAS), Intune, and Ping Castle.
11. Knowledge of the latest trends in information security and risk management.
12. Excellent problem-solving skills and ability to work under pressure.
13. Strong communication and presentation skills.
14. Ability to educate a non-technical audience about various security measures.
15. Effective project management skills and the ability to prioritize tasks.