Overview
Senior Security Engineer Jobs in Cape Town, Western Cape, South Africa at The Shoprite Group of Companies
Title: Senior Security Engineer
Company: The Shoprite Group of Companies
Location: Cape Town, Western Cape, South Africa
The purpose of the Senior Engineer is to provide security solutions for cloud-based digital platforms and plays an integral role in engaging with business units in order to ensure the organization’s digital platforms are protected. This involves analyzing and optimising existing cloud security measures/controls and creating new and enhanced security methods.
This role is part of a larger team dedicated to cloud-based management and security. The Lead Security Engineer is also responsible for the development and execution of highly complex, large-scale cyber security initiatives and requires a professional who is comfortable taking decisions and dealing with a range of problem-solving challenges and can work in a fast-paced environment and has a clear passion for cybersecurity and related technologies.
Role Description:
• Provide assurance through collaboration with other stakeholders that all cloud and digital platforms meet the organisation’s security requirements.
• Provide security recommendations on cloud-based data security, platforms and application development.
• Recommend innovative technologies or other methods that will enhance the security of cloud-based environments.
• Serve as the subject matter expert (SME) on cloud security.
• Develop standards, policies and procedures as well as best practices documentation.
• Translate security and technical requirements into business requirements and communicate security risks to different audiences ranging from business leaders to engineers.
• Influence multi-disciplinary teams in implementing and operating cyber security controls.
• Work closely with application developers to deliver creative solutions to complex technology challenges and business requirements.
• Automate security controls, data and processes to provide better metrics and operational support.
• Utilize cloud-based APIs when appropriate to write network/system level tools for securing cloud environments.
• Stay current on emerging security threats, vulnerabilities and controls. Identify and implement new security technologies and best practices.
• Create technical and managerial level reports and conduct risk assessments for Cloud-based applications and infrastructure.
• Identify processes/procedures for how to handle cloud security events, including forensic isolation and mitigation with Digital Forensics and Incident Response teams. • Identify new security threats by conducting continual monitoring, penetration testing, vulnerability assessments and log analysis.
Qualifications and Experience:
• Diploma / Degree in computer science, cybersecurity, or any related field.
• Recognized industry certifications in cybersecurity such as CISSP.
• +5 years of experience in cybersecurity, with solid hands-on expertise in cloud security.
• In-depth knowledge of public cloud offerings such as AWS, Azure and GCP
• In-depth knowledge of services related to cloud computing, network, storage, content delivery, administration and security, deployment and management, automation technologies.
• Experience with open-source software security.
• Solid knowledge of internet & network protocols with PKI, SSL, SSH etc. and deep packet inspection.
• Experience in Incident Response including the ability to document any security threats, resolve technical faults and allocate resources to deliver real solutions in a cost-effective way.
• Hands on knowledge of automation and DevSecOps, microservices, Ku…
