Information Security Engineer Job at 5CA

Information Security Engineer

5CA

Location:
South Africa

Category:
IT - Software Development

Contract Type:
Not provided

Salary:

Not provided

Save Job

Apply Position

Job Description:

The Information Security Engineer is responsible for designing, implementing, and maintaining security controls across the organization’s cloud, identity, endpoint, and network environments. This role focuses on engineering secure configurations, building automation, integrating security tooling, and ensuring the ongoing protection of systems and data. The Information Security Engineer works closely with the IT & InfoSec Helpdesk, Infrastructure teams, and Development teams to architect secure solutions, conduct security assessments, and implement governance frameworks aligned to ISO 27001 and internal InfoSec policies. This role also supports complex incident response activities, assists in root-cause analysis, and ensures controls are implemented following secure-by-design principles.

Job Responsibility:

Design, implement, and maintain security controls across Azure, Entra ID, Microsoft 365, network, and endpoint environments
Develop and maintain secure configurations, baselines, and policy frameworks using Azure Policy, Intune compliance, and conditional access
Integrate and optimize security tools including Microsoft Defender suite, SIEM/SOAR platforms, cloud security posture management, and identity governance systems
Support the design and review of cloud architectures, including secure VNet design, firewalls/NSGs, Private Link, and hybrid connectivity
Implement key cloud security protections such as encryption, identity governance, privileged access control, and secure automation frameworks
Partner with Cloud Engineers to codify security controls using Infrastructure-as-Code (IaC)
Implement and manage identity governance: MFA, Conditional Access, PIM, RBAC, role lifecycle automation
Review, assess, and refine authentication and access control configurations
Conduct periodic privileged access audits and align identity practices with Zero Trust principles
Tune and enhance SIEM/Sentinel detections, automation, and response playbooks
Develop KQL detection queries aligned to threat behaviours and emerging attack patterns
Improve signal fidelity across Defender platforms and integrate new data sources
Serve as technical escalation during high-severity incidents
Perform deep-dive investigations into identity compromise, cloud misconfigurations, lateral movement, and high-risk endpoint activity
Provide forensic artefact analysis support (logs, file metadata, registry data, process analysis)
Implement long-term remediation items and drive post-incident improvements
Support vulnerability assessment programs across cloud, endpoints, and SaaS platforms
Validate remediation efforts with system owners and ensure alignment to risk thresholds
Interpret vulnerabilities based on severity, real-world exploitability, and exposure in Microsoft, cloud, and identity stacks
Implement and maintain controls aligned with ISO 27001:2022 requirements
Support evidence collection, audit preparation, and remediation of nonconformities
Maintain accurate documentation including policies, baselines, runbooks, and reference diagrams
Build and maintain automation using PowerShell, Azure CLI, Logic Apps, and Functions
Automate user lifecycle, security state validation, incident containment tasks, and compliance reporting
Continuously identify opportunities to strengthen security posture through modernization, simplification, and automation
Work closely with Cloud, IT Support, Development, and Compliance teams to embed security into operational and architectural decision-making
Mentor InfoSec Analysts and provide guidance on investigation techniques, threat identification, and control operation
Deliver internal training, knowledge-transfer sessions, and documentation
Respond to and resolve incidents and requests within the agreed SLAs
Handle user and complex incidents across Azure, AVD, and M365
Fulfil service requests (e.g., resource provisioning, AVD image updates, M365 security baselines, conditional access adjustments)
Problem management: identify recurring issues, perform root-cause analysis, raise Problem records, and propose corrective/preventive actions
Escalation management: engage vendor support only after thorough triage and data collection (logs, timelines, impacted scope)

Requirements:

4+ years of experience in information security engineering, cloud security, or infrastructure security roles
Hands-on experience implementing security controls in Azure and Microsoft 365 ecosystems
Experience with Defender for Endpoint, Defender for Cloud, Defender for Identity, and Sentinel
Experience with secure cloud networking, identity governance, and Zero Trust principles
Experience supporting complex incident response investigations
Familiarity with ITIL processes (incident, change, problem)
Understanding of security frameworks (i.e. ISO 27001:2022) and data privacy regulations (i.e. GDPR)
Azure security architecture, governance, and configuration
Advanced Entra ID identity governance and access control
Endpoint and cloud threat detection (Defender suite)
SIEM/SOAR engineering (Sentinel, Logic Apps)
PowerShell, automation, and API integration
KQL, log analysis, and detection engineering
Infrastructure-as-Code familiarity (Bicep/ARM/Terraform)
Secure network design, segmentation, and encryption practices
CompTIA Security+ or similar (i.e. ISC2 Certified in Cybersecurity)
SC-300: Identity & Access Administrator
Customer focused
Communication
Collaborative
Innovative
Problem-solving
Adaptability

Nice to have:

AZ-500: Azure Security Engineer
SC-200: Security Operations Analyst
ISO 27001: 2022 Foundations

What we offer:

The flexibility to work 100% remotely with no wasted commute time and travel costs
A position at a fast-paced international company with ambitious gaming, e-commerce, and tech clients
A diverse and inclusive culture with people from 80+ countries, speaking 25+ languages
Innovative digital tools, and continuous opportunities for learning and development
Access to Udemy Business for learning and development
Fun employee engagement activities and participation in 5CA employee-lead communities

Additional Information:

Job Posted:
May 10, 2026

Employment Type:

Fulltime

Work Type:

Remote work

5CA - All Job Offers

Job Link Share: