Cybersecurity Principal Technical Specialist - DFA

ACCOUNTABILITIES & RESPONSIBILITIES (KEY PERFORMANCE AREAS & TASKS) Technical Security Architecture & Engineering Design, build and continuously harden security architecture across the network, IT infrastructure and application layers — including firewalls, switches, routers and other core network elements; define reference architectures and secure-by-design standards; lead Zero Trust and network segmentation implementation, including Cloudflare Zero Trust/SASE access. Network & Telecom Infrastructure Security Secure the fibre access and transport network end to end (FTTB, FTTH/GPON/XGS-PON access electronics, OLT/ONU, IP/MPLS core, DWDM optical transport, BGP/routing security, DNS); configure and harden firewalls, switches and routers and other network elements; harden NOC/OSS systems and network management platforms; defend against DDoS and routing-layer attacks using Cloudflare and related edge/WAF controls. Enterprise IT & ERP Systems Security Secure core IT infrastructure (Windows/Linux server estate, Active Directory/IAM, virtualisation, public cloud) and business-critical ERP/OSS-BSS/billing systems using the Microsoft security stack (Defender, Purview) for endpoint, cloud, identity and data protection; embed application and API security, including SAST/DAST and secure SDLC practices Security Operations, Detection & Incident Response Own the CrowdStrike Falcon platform (full stack — EDR/XDR, identity and cloud security) and other SIEM/SOC tooling, threat detection and threat hunting; lead technical incident response, digital forensics and containment; work with the Arctic Wolf managed detection and response (MDR) partnership and other MSSP/SOC partners on technical detection and response. Provide technical scenario design and hands-on facilitation support for incident-response tabletop exercises, which are governed and coordinated by GRC/Manager: Information Security. Vulnerability & Penetration Testing — Technical Support Provide the deep technical execution behind the Group's vulnerability management and penetration-testing programmes — operating Tenable Nessus and Tenable.io, performing hands-on remediation and hardening, and providing technical execution/participation in penetration tests and red-team exercises. Programme governance (scheduling, reporting, third-party sourcing) sits with GRC/Manager: Information Security; this role owns the technical fix and validation. Identity, Access & Cryptography Design and maintain privileged access management (PAM)/IAM, multi-factor authentication, PKI, certificate lifecycle and key management across network and IT domains. Governance, Risk & Compliance — Technical Support Translate Group policy and frameworks (NIST CSF, ISO 27001, POPIA), owned and maintained by GRC/Manager: Information Security, into implemented technical controls and audit evidence; provide technical input and subject-matter expertise to risk assessments and audits. Technology Evaluation & Vendor Engagement Evaluate and select security and network technologies; provide technical oversight of security/MSSP vendor relationships and proof-of-concepts. Leadership & Technical Mentorship Lead and develop a small technical security engineering team; set technical standards and act as the Group's senior technical escalation point for complex security engineering problems across DFA, Vuma and other operating companies. Innovation & Emerging Technology Track and pilot emerging security and network technologies (AI-assisted threat detection, SASE/SSE, cloud-native and container security) and drive adoption where they add value. Miscellaneous Perform any other work-related duties and responsibilities that may be assigned from time to time by management. Requirements Competencies and Minimum Requirements: Knowledge, qualifications and experience Bachelor's degree: in computer science, information technology, cybersecurity, computer/electronic engineering, or a related technical field. Professional technical certification — at least one from each of the following domains: Offensive/technical security: OSCP, CEH, GIAC GPEN/GWAPT, or CompTIA PenTest+ Security management/architecture: CISSP or CCSP Network security: Cisco CCNP Security/CCIE Security, or equivalent (Fortinet NSE, Palo Alto PCNSE) ITIL (Foundation or above) Continuous professional development: expected to maintain current certifications and stay abreast of emerging threats, network technologies (PON evolution, 5G backhaul, SASE) and regulatory change. Honours or relevant Master's degree: in cybersecurity, network engineering or information systems (ideal). Cloud security certification: AWS Certified Security - Specialty, Microsoft SC-100, or equivalent. Detection/incident response: GIAC GCIH/GCIA/GDSA or SANS equivalent. Vendor/platform certification: in the Group's core technology stack — e.g. CrowdStrike Certified Falcon Administrator/Responder, Tenable certifications, Microsoft SC-200/SC-300/SC-400, or Cloudflare certifications — is an advantage. Minimum 10 years' working experience in cybersecurity and/or network/IT engineering, with at least 6 years in hands-on technical security engineering (not purely governance or management). Technical mastery: demonstrated deep expertise across network security, IT infrastructure security and application/ERP security, and security frameworks (NIST, ISO 27001, COBIT, MITRE ATT&CK). Telecom/network operator experience: experience within a network operator, ISP or telecommunications business is strongly preferred, ideally including exposure to FTTB and/or FTTH/GPON access networks and IP/MPLS or optical transport networks, alongside conventional enterprise IT and ERP environments. Operational track record: leading technical incident response, and providing hands-on technical execution/support into vulnerability management and penetration-testing programmes. Team leadership: experience leading or mentoring a technical security team.