Information Security Engineer | Waterfall, Midrand at PSG Konsult Ltd

Job Description :


An opportunity exists for a Senior Information Security Engineer to work within a growing financial services organisation, supporting both on-premises and cloud-based environments. An opportunity exists for a Senior Information Security Engineer to work within a growing financial services organisation, supporting both on-premises and cloud-based environments


Key Responsibilities

Security Architecture & Engineering


Lead the design and implementation of advanced security controls across on-prem, cloud, and SaaS environments (Azure, Microsoft 365).
Define security architecture standards and review new technology integrations for compliance.
Champion secure development lifecycle practices and perform advanced application security assessments.
Configure and maintain enterprise firewalls to ensure optimal security and performance.
Implement and manage Web Application Firewall (WAF) solutions to protect against application-layer attacks


Security Operations Leadership


Oversee, configure and optimize security tools (Firewalls, Webservers, SIEM, EDR, DLP, vulnerability management platforms).
Develop automation strategies for threat detection and response, integrating with ITSM platforms
Establish operational playbooks and mentor team members on best practices.
Collaborate with outsourced SOC teams to ensure effective monitoring and incident escalation.
Integrate SOC services into PSG's security operations framework for seamless threat detection and response.
Manage SLAs and performance metrics for outsourced SOC providers


Incident Response & Threat Management


Lead major incident investigations, forensic analysis, and root cause determination.
Act as escalation point for critical security events and coordinate cross-functional response.
Drive proactive threat hunting and advanced analytics initiatives.


Vulnerability & Patch Management


Define vulnerability management strategy and ensure timely remediation of critical risks.
Provide executive-level reporting on risk exposure and remediation progress.


Identity & Access Management


Architect and enforce enterprise-level identity governance using Microsoft Entra ID (Azure AD).
Implement advanced privileged access management and zero-trust principles.


Information Security Awareness


Develop and deliver security awareness programs to educate employees on cybersecurity best practices.
Create engaging content and campaigns to promote a culture of security across the organization.
Measure effectiveness of awareness initiatives and report improvements to leadership.


Compliance & Risk Advisory


Ensure alignment with ISO 27001, NIST CSF, CIS benchmarks, and regulatory requirements (POPIA, GDPR, FSCA).
Lead technical audits, penetrations tests, red/blue team exercises and provide authoritative guidance on risk mitigation strategies.


Operational & Executive Reporting


Deliver strategic security metrics, risk dashboards, and board-level presentations.
Recommend improvements to security posture based on threat intelligence and trend analysis.
Implement security posture improvements and report on progress
Produce detailed reports on firewall and WAF configurations, changes, and performance metrics.


Minimum requirements


Bachelor's degree in IT, Computer Science, or related field.
CISSP, CISM, or equivalent senior-level certifications.
Microsoft Certified: Cybersecurity Architect Expert or SC-series certifications.
7+ years in cybersecurity or security engineering roles, with at least 3 years in a senior or lead capacity.
Expert-level knowledge of SIEM, EDR, firewalls, DLP, and vulnerability management platforms.
Hands-on experience in firewall configuration, WAF deployment, and generating detailed security reports.
Experience in designing and implementing information security awareness programs.
Advanced understanding of identity governance, zero-trust architecture, and cloud security (Azure, Microsoft 365).
Strong experience with scripting and automation (PowerShell, Python).
Proven track record in leading incident response and security architecture projects
Experience with Hillstone security technologies, NGINX, Microsoft InTune, Microsoft Purview, and various SIEM solutions preferred


Skills & Competencies


Strong organizational and documentation skills.
Ability to mentor and develop junior engineers.
Excellent communication and customer service orientation.
Excellent communication skills for executive and technical audiences.
Ability to analyse data and identify trends.
Proficiency in ITSM tools and Microsoft Office Suite.
Ability to manage multiple priorities in a fast-paced environment.
Troubleshooting and strong resolution skills
Highly ethical, resilient, and committed to continuous improvement.
Achievement / Results orientated
Team Player
Motivated and positive attitude


Closing date: 31-Aug-2026