Security Engineer II at Shoprite Group of Companies

About the role    

• The purpose of the Network Security Engineer II is to deliver and optimise cyber security engineering capabilities across platforms by implementing controls, strengthening system resilience, and managing security risks.
• Translates security requirements into practical solutions, drives automation and threat intelligence integration, and supports the delivery of secure, scalable technology environments. 

What you'll do    

Security Engineering & Control Implementation 

• Implement and maintain security controls across systems, networks, and platforms. 
• Deploy and optimise security technologies, for example SIEM, EDR, IAM, WAF, DLP and encryption. 
• Support the installation, configuration, and improvement of security tools and processes. 
• Ensure platforms comply with defined security standards and requirements. 

Threat Monitoring, Detection & Response 

• Monitor systems and networks for security incidents and vulnerabilities. 
• Investigate, analyse, and respond to security events in collaboration with relevant teams. 
• Conduct vulnerability assessments, log analysis, and continuous monitoring. 
• Support incident response processes and contribute to remediation actions. 

Risk Mitigation & Continuous Improvement 

• Identify security gaps and recommend enhancements to reduce risk exposure. 
• Evaluate and implement new security technologies and best practices. 
• Conduct research on emerging threats, vulnerabilities, and control strategies. 
• Contribute to improving the organisation’s overall security posture. 

Security Standards, Governance & Enablement 

• Develop and maintain security standards, policies, and procedures. 
• Translate technical security requirements into business-aligned recommendations. 
• Provide guidance to stakeholders on security risks and control effectiveness. 
• Support alignment to information security frameworks and best practices. 

Automation, DevSecOps & Integration 

• Automate security processes, controls, and reporting for operational efficiency. 
• Support DevSecOps practices by integrating security into development pipelines. 
• Enable improved visibility through metrics, reporting, and threat intelligence feeds. 
• Work closely with engineering teams to embed security into system design. 

What you bring    

• A qualification in computer science, cybersecurity, or any related field (advantageous). 
• Recognised industry certification in cybersecurity, such as CISSP (essential). 
• +4 years of experience in cybersecurity, with solid experience across a variety of security products including firewalls, EDR, SIEM, WAF, IAM, PAM, DLP and encryption solutions or similar (essential). 
• Knowledge of services related to cloud compute, network, storage, content delivery, administration and security (essential). 
• Good understanding and exposure to Information Security standards, architecture and models (essential). 
• Hands-on knowledge of automation and DevSecOps skills (essential). 
• Good understanding of software development principles, including design patterns, code structure, programming languages, continuous integration, continuous deployment and deployment orchestration (preferred). 
• Experience in creating new ways to solve existing production security issues and recommending security enhancements (desired). 
• Experience in Incident Response, including the ability to document security threats, resolve technical faults and allocate resources to deliver real solutions in a cost-effective way (desired). 

Closing Date    

• 2026/09/17