Cyber security operations engineer - Gauteng, Johannesburg - Johannesburg
Dynamix
Defense SIEM and CSOC SME Engineer, you will be responsible for: Subject Matter Expert (SME) for Cyber SIEM and CSOC Solutions Leading deployments for Cyber Defence Solutions and Technology Coordinating Cybersecurity Teams incase of a Market Breach, especially Incidents impacting Multiple markets Providing Cyber defense guidance with MPA, with markets and Stakeholders SPOC for the Cloud based Security Datalake and ensure security logs from all markets are updated Guiding and Managing L1 Cyber resources Lead MPA and markets Cyber teams in M-Pesa cyber incident detection and response; Supporting the Integration of Systems into SIEM and Maintaining it; Develop use cases for SIEM analysis; Create Alerts, Reports and Dashboard for the SIEM; Support on Cyber Defense tools customization and development for data feeds; Threat intelligence deployment and integration; Run Purple team gap analysis session; Cyber Defense Systems performance and resource optimization; Act as an operational team lead in the configuration, management and upgrade of a wide variety of other security products/appliances Troubleshoot and remediate Level 1/2/3 issues impacting Cybersecurity operations Facilitate implementation, management and optimization of Cyber Security policies, standards and procedures; Drive standards of excellence to achieve the Cyber Security strategy Improvement of the Cyber security posture of the company through several initiatives, including but not limited to Cyber Security Baselines. Qualifications Degree in Electrical Eng/Computer Science/information Technology or equivalent Technology-related degree At least two professional Cyber Qualification: CISSP/CISM/CISA Advanced competencies in Network Security: CCNP or CCIE (Security) Advanced competencies in Microsoft, Linux or Unix Operating Systems administration Advance competencies experience in Information Security Technologies Skills and Experience Minimum of FIVE years CyberSecurity experience with Security logging and Monitoring Tools for Cloud and On-prem systems: including SIEM, EDR and Threat Hunting tools Minimum of ONE year CyberSecurity experience with Intrusion Prevention Systems, Web Application Firewalls, VPN administration, Content Filters, Security Scanning tools. Minimum of 1-year focused Security experience in Incident Management, Intrusion Analysis, Network troubleshooting or Reverse Engineering. Experience in design, delivery and support of Information Security solutions to customers will be and added advantage. Good communication skills and team player. Experience in the use of security tools. Project management skills, and proven task execution (getting things done). Superior Report writing skills. Analytical Thinking. I Desired Skills: SIEM CSOC Cybersecurity EDR Incident management SOC Arcsight AWS Cloud Desired Work Experience: 5 to 10 years Desired Qualification Level: Degree
Apply Now
Facebook
WhatsappRelated Jobs
Cyber Security Specialist Gauteng - Gauteng
N-tegrate Talent Solutions pty ltd
...
Cyber Security Intern Johannesburg - Johannesburg
Electech Power Solutions
...
Information Security Analyst - Roodepoort
South African National Blood Service
...
Information Security Analyst Roodepoort - Roodepoort
South African National Blood Service
...
Senior It System Engineer Johannesburg - Johannesburg
HSC Systems
...