Security Support Engineer

As a Security Support Engineer, you'll work closely with our Head of Security and wider engineering teams. This is a developmental role where the right individual will be mentored and trained across core security functions. Your responsibilities will span, but are not limited to:

• Assist with triaging and investigating security alerts from our EDR, SIEM, and other monitoring platforms
• Perform initial classification and analysis of events and escalation where required
• Help maintain security playbooks and alert handling documentation

• Support in the creation and maintenance of configuration and security baselines across customer environments
• Assist in routine reviews and audits of endpoint and cloud security configurations
• Remain up to date with landscape changes

• Assist with deployment and configuration of security tools (e.g., EDR agents, logging solutions, monitoring sensors)
• Help maintain asset and vulnerability tracking data
• Support onboarding of new customers into security tools and processes

• Contribute to internal documentation and knowledgebase content related to security processes
• Assist in automating repeatable tasks using Power Shell and other scripting tools
• Help improve internal efficiency through process reviews and playbook refinements
• Third party risk management assessments

• Strong foundation in Microsoft 365 (Exchange, SharePoint, Teams, One Drive) and Azure
• Hands-on experience with Windows OS and core troubleshooting; macOS is a plus
• Familiarity with Microsoft Defender for Endpoint, Defender for Cloud, and Defender for Office 365
• Understanding of Intune, MDM, Conditional Access, and Entra  (Azure AD) security features
• Knowledge of basic networking concepts (IP addressing, routing, firewalls)
• Scripting experience (Power Shell preferred) to assist in automation and reporting tasks

• Analytical, detail-oriented, and security-minded
• Proactive learner with the ability to absorb and apply new technical concepts
• Strong communicator (written and verbal) capable of working with both technical and non-technical stakeholders
• High sense of accountability, ownership, and follow-through
• Team player who thrives in a fast-paced, evolving environment

• Microsoft SC-900 (Security, Compliance, and Identity Fundamentals)
• Microsoft SC-200 (Security Operations Analyst Associate)
• Microsoft SC-100 (Microsoft Cybersecurity Architect)
• Microsoft AZ-500 (Azure Security Engineer Associate)
• Microsoft MD-102 (Modern Desktop Administrator Associate)
• Microsoft 365 Certified:
  Administrator Expert
• CompTIA Security+
• CompTIA CySA+ (Cybersecurity Analyst)

This role is based in Pinelands, Cape Town South Africa

The standard 8-hour shift between 3PM and midnight, Monday to Friday, is aligned with global support needs. Shift flexibility may be required to balance business coverage.

• Access to security and cloud certification resources and learning platforms