Junior Security Engineer

MANCOSA, a DHET registered and CHE accredited private higher education distance education provider, offering undergraduate and postgraduate business qualifications, has the following vacancy available

The Security Engineer will be responsible for designing and overseeing the ongoing maintenance and management of the organization’s security architecture, ensuring that it is aligned with global best practice (ISO
27001, NIST or similar), business objectives, internal risk management strategies, and external regulatory compliance (POPIA, DHET, CHE among others).

This role requires developing secure infrastructures for both on‑premises and cloud environments (AWS, Azure, Microsoft 365, Google). The Security Engineer will collaborate with cross‑functional teams to integrate security into all aspects of IT infrastructure, applications, web applications, mobile applications, and networks while ensuring that security controls are in place for effective threat management, incident response, and business continuity.

In addition to technical expertise, the Security Engineer will play a critical role in driving governance, risk management, and security frameworks. This includes conducting regular cybersecurity assessments (technical and otherwise), designing remediation plans based on findings, and ensuring the organization’s security posture is continuously improved.

1. Design & Implementation of Security Engineer

• Design and implementation of security architectures for cloud platforms (AWS, Microsoft 365, Azure) and on‑premises infrastructures.
• Ensure that all systems, applications, and network environments are secure by design, integrating security controls into the entire lifecycle of infrastructure and application development (Dev Sec Ops ).
• Collaborate with Dev Ops, IT, and business teams to ensure security requirements are embedded in technical implementations.
• Security of cloud environments, including Identity and Access Management (IAM), encryption, and cloud monitoring solutions.
• Provide guidance on best practices for securing cloud services, storage, and computing.
• Implement security tools and practices such as multifactor authentication (MFA), zero‑trust architecture, and data encryption for cloud platforms.

3. Governance, Risk, and Compliance (GRC)

• Develop and enforce security governance frameworks that align with industry best practices, regulatory requirements (POPIA), and internal risk management strategies.
• Ensure that security controls are compliant with regulatory requirements and that governance processes are in place for continuous monitoring.
• Collaborate with risk management teams to conduct risk assessments and prioritize mitigation efforts across the infrastructure.
• Collaborate with internal and external audit teams to remediate audit findings.

4. Security Assessments & Vulnerability Management

• Conduct regular security assessments, penetration testing, and vulnerability scanning across network, cloud, and application layers.
• Design and lead the remediation of vulnerabilities identified in assessments, ensuring alignment with broader security governance and risk management strategies.
• Continuously improve the security architecture based on assessments and evolving security threats.

5. SOC & SIEM Integration and Monitoring

• Management of SIEM (Security Information and Event Management) solutions that align with the overall security architecture.
• Ensure proper integration of monitoring tools to detect, analyse, and respond to security incidents in real time.
• Collaborate with the Security Operations Centre (SOC) to enhance incident detection, analysis, and response workflows.
• Develop periodic reports providing management with deep insights into the functioning of the Security Operations Centre.

6. Security Policies and Procedures Development

• Development of security policies, standards, and procedures to support secure system architecture.
• Regularly review and update security policies to align with technological advancements and regulatory changes.
• Ensure that security procedures are well documented and integrated into daily operations and disaster recovery/business continuity…