Senior Security Operations Engineer

Job title : Senior Security Operations Engineer Reporting to : Engineering Team Lead Location : Cape Town ALL STAFF APPOINTMENTS WILL BE MADE WITH DUE CONSIDERATION OF THE COMPANYS EE TARGETS WHAT WE DO Lula is an innovative and human-focused FinTech company on a mission to help small businesses optimise their cash flow. Our purpose is to help SMEs manage their businesses better faster and more simply so they can spend more time doing what they love. If youre looking for a new place to call home that believes in the potential of the broader SME landscape in South Africa and a place where youll work with awesome people - then Lulas the place for you Were making business banking fast human Lula CULTURE CODE We embrace C uriosity We win as O ne Were D riven by Purpose We E xecute with Ambition OVERALL PURPOSE We are looking for a Senior Security Operations Engineer to join our team. The successful candidate will be responsible for securing monitoring and maintaining the overall security posture of our Azure platform and infrastructure as well as our on-site networks and systems. You will work closely with all departments and teams to implement and provide guidance on security best practices and regulatory compliance. As a Senior Security Operations Engineer you will also be responsible for identifying and responding to security incidents and conducting security assessments audits and simulations. Responsibilities will include : Infrastructure Security Partner with our DevSecOps team to design implement and manage security controls and policies for our Microsoft Azure Infrastructure Partner with our Engineering teams to ensure that code deployed on Lulas infrastructure is done securely Conduct regular security assessments and audits of Azure and internal infrastructure and platforms including vulnerability scanning and penetration testing Identity Security Manage and regularly audit our privileged accounts to ensure access remains relevant and required Design implement and manage policies and controls to secure Lulas accounts and access to our resources using Microsoft Entra ID toolsets Provide security awareness training to the business to improve our security posture Perform security incident / phishing simulations to ensure our processes and training are robust and effective On-Premise Security Monitor and manage Lulas access control and camera systems Provide guidance and support to internal departments on handling of confidential information Partner with our Technical Support team to ensure Lulas network and endpoints are configured securely and monitored for threats Regulatory Compliance and Governance Be a critical part of Lulas PCI DSS annual re-certification process Develop and maintain security documentation including policies procedures and technical standards that adhere to compliance requirements Collaborate with external auditors and partners to ensure compliance with various regulatory requirements and industry standards Security Incident Management Be the key point of contact for security incident and alert investigations Develop remediation plans conduct Root Cause Analysis and provide corrective and preventative measures during Post Incident Reviews Participate in on-call rotation to provide 24 / 7 support for Security Incidents THE SKILLS AND EXPERIENCE WERE LOOKING FOR Tertiary qualification in Computer Science Information Security or equivalent experience 5 years of experience in a SecOps field preferably using Microsoft technologies with a focus on Azure Expert knowledge of Cloud focussed security features including Azure Defender for Cloud Azure Sentinel Entra ID Front Door Privileged Identity Management Intune and Defender for Endpoint Experience with security assessments and audits including vulnerability scanning penetration testing and incident simulations Hands-on Kali experience would be beneficial Exposure to configuring SAST tools like SonarCloud Familiarity with industry standards and regulatory requirements such as POPIA PCI DSS and ISO 27001 Familiarity with security related network technologies such as firewalls & VPNs Azure or Cyber Security certifications such as Azure Security Engineer Associate Azure Solutions Architect Expert or CISSP are a plus Knowledge of securing coding practices like OWASP Knowledge of secure API implementation technologies OAuth and OIDC Please note that all appointments are subject to our background checking process which may include Credit Criminal and any other job inherent checks. Required Experience : Senior IC Key Skills Splunk,Compliance Management,IDS,SOC,Cybersecurity,Identity & Access Management,Security,Information Security,Process Engineering,Metadata,Encryption,Siem Employment Type : Full-Time Experience : years Vacancy : 1 #J-18808-Ljbffr