IT Security Operations Engineer at AVI Limited

Job Description

AVI LIMITED is home to many of South Africa’s leading and best-loved brands! Listed on the Johannesburg Stock Exchange and centered on the FMCG market, AVI’s extensive brand portfolio includes more than 50 brands. Our brands span a range of categories, including hot beverages, sweet and savoury biscuits, and snacks, frozen convenience foods, out-of-home ranges, personal care products, cosmetics, footwear, accessories, and fashion apparel. We have a well-developed Shared Services structure spanning: International, IT, Finance, Logistics, Marketing, Procurement, and Field Marketing, which allows us to take advantage of our scale. Our single-minded purpose is our brands' growth and development. 

An exciting opportunity exists for an IT Security Operations Engineer at AVI Limited IT Shared Services in Bryanston. 

The purpose of the role is:   

1. Apply technical IT Security Infrastructure expertise and tools to ensure the security of AVI IT operations and supporting infrastructure

2. Implement, Manage, Maintain and Administer AVI’s Security Infrastructure and Systems

3. Implement and optimise tools to effectively manage and monitor infrastructure and provide effective alerting and reporting with regards to security incidents and vulnerability assessments

4. Play lead role in uplifting skills of the IT Network and Systems Engineering team members and provide guidance to all ITSS with regards to IT Security Operations. 

Line Manager: IT Security Operations Team Lead 

Number of Direct Reports: None 

Job Specification:

Key Performance Areas:

1. IT Security threat/breach identification, prevention, and remediation

2. IT Security Infrastructure administration and maintenance

3. Provide IT Security Infrastructure input to ITSS technical projects

4. Provide input into relevant IT Security Policies, Procedures, standards, and guidelines in conjunction with the IT Security Specialist and Manager

5. Development of Network and Systems team skills for ITSS 

Minimum Requirements:

Experience:

Essential

• 3 years’ Security Appliance (including UTM) and related administration and analysis tools, specifically across the FortiGate security product line

• 2 years’ experience implementing and managing a SIEM solution (either in house or hosted service)

• 3 years’ experience managing Microsoft Windows solutions (Windows Server OS / Active Directory Services / Microsoft Business Servers)

• 2 years’ experience managing an industry-leading virtualization platform (VMware / Hyper-V) or managing cloud resources (Azure / AWS)

Important

• 3 years’ Network Administration (Switching, Routing and Wireless)

• 3 years’ Network and Web security protocols

• 3 years’ experience with Forensic and monitoring tools e.g. Wireshark, etc 

Nice to have

• 3 years’ System Security vulnerability identification and remediation

• 2 years’ experience with public key infrastructure (PKI) and cryptographic protocols e.g. SSL / TLS

• 2 years’ experience in PCIDSS as well as knowledge of local personal information protection legislation (POPI)

• 3 years’ experience in the installation, administration, maintenance and usage of security-hardened Operating Systems e.g. Kali Linux

• 2 years’ experience working within DSS PCI environments

• 2 years’ experience designing and deploying infrastructure security policies based on industry standards such as CIS, ISO27001

• Ability to automate / script solutions (PowerShell / Python), or implementation of orchestration services

• Exposure to SAP Business Systems (R/3, Netweaver) and database experience (MS SQL / MySQL) 

Certifications:

Essential

• Fortinet NSE4

Important (at least one of the following)

• Microsoft Technology Associate (MTA) / MCSA (Microsoft Certified Systems Administrator) 

• Cisco Certified Network Associate (CCNA)

• Cisco Certified Network Associate (CCNA) Security

• MCSE (Microsoft Certified Systems Engineer)

• CompTIA Cybersecurity Analyst (CySA+) 

Nice to have

• CEH (Certified Ethical Hacker)

• CCNA (Cisco Certified Network Administrator - Routing and Switching, Wireless, Collaboration

• VMware Certified Professional (VCP)

• Azure Security Engineer

• CISSP

• RHCSA - Red Hat Certified System Administrator

• CEH (Certified Ethical Hacker)

• CCNP (Cisco Certified Network Professional) – Routing and Switching, Wireless, Collaboration

• CISSP ISP

• Fortinet NSE7

• KLCP – Kali Linux certified Professional and/or RHCE - Red Hat Certified Engineer

• CompTIA Advanced Security Practitioner (CASP+)

• CompTIA Cloud+

• Cisco ISE 

Additional Requirements:

• Deployment, Administration, and Maintenance of Security Infrastructure

• Securing and maintenance of security on the Wired and Wireless Network Infrastructure as well as Systems Infrastructure

• Continual monitoring of IT infrastructure using available tools to identify and prevent threats from reaching the network

• Audit existing infrastructure and systems, to determine security posture, and provide long-term strategies and solutions to ensure these are fully secure

• Provide expert security input into IT projects to ensure that security mechanisms and systems are deployed during projects

• Assist all teams and provide input into IT Security policies, procedures, standards and guidelines to be implement across the AVI groups’ IT infrastructure

• Provide ongoing guidance and training to Infrastructure engineering and support teams

• Investigate and keep abreast of new security tools available in the industry, and make recommendations on areas where there are gaps within the currently deployed solutions

• Administration of open-source Operating Systems (Linux) 

Competencies:

• Problem-solving

• Innovate and create

• Manage and share information

• Composed and resilient

• Focus on achieving results

• Empower and develop others

• Applying and developing technical/functional skills

• Initiative / Independence

• Communication