Cybersecurity Engineer

Datacentrix Cape Town is looking for a Cybersecurity Engineer with 3–5 years’ experience in IT infrastructure, systems administration, or cybersecurity. The ideal candidate must have hands-on experience in Microsoft Windows Server, Active Directory, Group Policy, DNS, DHCP, Microsoft Entra ID (Azure AD) and Microsoft 365 administration and security technologies. The role requires practical experience or exposure to security solutions such as firewalls, EDR/XDR, SIEM, and IAM, as well as security monitoring, incident response, vulnerability management, Microsoft Azure, cloud security principles, patch management, and system hardening.

Requirements:

• Matric and relevant tertiary/certification in IT
• 3-5 years' experience in cybersecurity, IT infrastructure and systems administration
• Experience implementing and supporting security solutions such as firewalls, EDR/XDR, SIEM, and IAM.
• Working knowledge of Microsoft Azure and cloud security principles.
• Experience with Microsoft 365 administration and security technologies.
• Exposure to security monitoring, incident response, and vulnerability management.
• Hands-on experience administering and securing Microsoft Windows Server environments.
• Experience with Active Directory, Group Policy, DNS, DHCP, and Microsoft Entra ID (Azure AD).

Desired – Not Mandatory Certifications:

• Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900)
• Microsoft Certified: Information Security Administrator Associate (SC-401)
• MCSE: Core Infrastructure/ MCSA Windows Server 2016
• Microsoft Certified: Windows Server Hybrid Administrator Associate
• Microsoft 365 Certified: Endpoint Administrator Associate
• Fortinet NSE4
• CC Cybersecurity
• CompTIA Security+
• CySA (CompTIA Cybersecurity Analyst)

Overall Responsibilities:

Security Engineering & Implementation

• Deploy, configure, and maintain security technologies across network, endpoint, cloud, and application environments.
• Administer security tools such as Firewalls, IDS/IPS, EDR/XDR, SIEM, IAM, and DLP solutions.
• Perform system hardening in line with security standards and best practices.
• Ensure security controls remain operational, effective, and appropriately configured.

Security Monitoring & Threat Management

• Monitor security environments for suspicious activity and potential threats.
• Analyze logs, alerts, and events using SIEM and other monitoring tools.

Vulnerability & Risk Management

• Conduct vulnerability scans and assessments.
• Assist with penetration testing activities and remediation planning.
• Track vulnerabilities through to closure.
• Support patch management and system remediation efforts.

Incident Response & Recovery

• Participate in incident investigation, containment, eradication, and recovery activities.
• Execute incident response procedures and playbooks
• Assist in root cause analysis and post-incident reviews.
• Maintain incident documentation and evidence.

Compliance & Governance

• Support compliance initiatives relating to ISO 27001, NIST, CIS Controls, POPIA, and other applicable frameworks.
• Assist with audits and compliance assessments.
• Maintain security documentation, standards, procedures, and records.
• Monitor adherence to security policies and standards.

Stakeholder Engagement

• Work closely with IT Operations, Infrastructure, Cloud, and Application teams.
• Communicate technical findings and recommendations effectively.
• Provide security guidance and awareness support to internal stakeholders.
• Contribute to knowledge sharing and continuous improvement initiatives