Role Description
As a Security Support Engineer, you'll work closely with our Head of Security and wider engineering teams. This is a developmental role where the right individual will be mentored and trained across core security functions. Your responsibilities will span, but are not limited to:
Security Monitoring & Incident Support
- Assist with triaging and investigating security alerts from our EDR, SIEM, and other monitoring platforms
- Perform initial classification and analysis of events and escalate where required
- Help maintain security playbooks and alert handling documentation
Baseline and Environmental Health
- Support in the creation and maintenance of configuration and security baselines across customer environments
- Assist in routine reviews and audits of endpoint and cloud security configurations
- Remain up to date with landscape changes
Project & Implementation Support
- Assist with deployment and configuration of security tools (e.g., EDR agents, logging solutions, monitoring sensors)
- Help maintain asset and vulnerability tracking data
- Support onboarding of new customers into security tools and processes
Documentation & Automation
- Contribute to internal documentation and knowledgebase content related to security processes
- Assist in automating repeatable tasks using PowerShell and other scripting tools
- Help improve internal efficiency through process reviews and playbook refinements
- Third party risk management assessments
Technical Skills
- Strong foundation in Microsoft 365 (Exchange, SharePoint, Teams, OneDrive) and Azure
- Hands-on experience with Windows OS and core troubleshooting; macOS is a plus
- Familiarity with Microsoft Defender for Endpoint, Defender for Cloud, and Defender for Office 365
- Understanding of Intune, MDM, Conditional Access, and Entra ID (Azure AD) security features
- Knowledge of basic networking concepts (IP addressing, routing, firewalls)
- Scripting experience (PowerShell preferred) to assist in automation and reporting tasks
Soft Skills
- Analytical, detail-oriented, and security-minded
- Proactive learner with the ability to absorb and apply new technical concepts
- Strong communicator (written and verbal) capable of working with both technical and non-technical stakeholders
- High sense of accountability, ownership, and follow-through
- Team player who thrives in a fast-paced, evolving environment
Qualifications & Experience
We place a strong emphasis on certification and continuous development. As part of this role, you will be expected to actively pursue certifications in the Microsoft security and Azure security tracks, as well as CompTIA or equivalent. Complete at least two industry recognised certifications per year (Cloudbox supported and funded). Target certifications may include (but are not limited to):
- Microsoft SC-900 (Security, Compliance, and Identity Fundamentals)
- Microsoft SC-200 (Security Operations Analyst Associate)
- Microsoft SC-100 (Microsoft Cybersecurity Architect)
- Microsoft AZ-500 (Azure Security Engineer Associate)
- Microsoft MD-102 (Modern Desktop Administrator Associate)
- Microsoft 365 Certified: Administrator Expert
- CompTIA Security+
- CompTIA CySA+ (Cybersecurity Analyst)
Location
This role is based in Pinelands, Cape Town South Africa
Working Hours
The standard 8-hour shift between 3PM and midnight, Monday to Friday, is aligned with global support needs. Shift flexibility may be required to balance business coverage.
Benefits
· Access to security and cloud certification resources and learning platforms
