IT Sr Security Engineer

Stonehage Fleming is one of the worlds leading independently owned family offices and the

largest in Europe, Middle East and Africa (EMEA), as measured by its breadth of services,

geographic reach and by assets under management, advice and administration.

Stonehage Fleming provides a range of services from long-term strategic planning and investments to day-to-day advice and administration to over 250 families of wealth. The Group employs over 1000 people in 20 offices

in 14 jurisdictions around the world.

WORKING RELATIONSHIPS

The position reports to the IT Security Team Lead and is based in Johannesburg or Cape Town. Other working

relationships include all members of the IT team, all users worldwide and external suppliers.

OVERALL PURPOSE

The Overall Purpose Of This Position Is To

• Oversee the implementation, management, and optimization of advanced security technologies.
• Continuously monitor security events and incidents, evaluating the impact of identified vulnerabilities within the organizations environment.
• Perform proactive threat detection, incident handling, and automation, refining detection rules and use cases to address malicious activity.
• Lead investigations of security events and incidents, assessing their severity and collaborating with MDR partners as needed.
• Develop and execute remediation plans, collaborating closely with IT Engineering to address and mitigate exposed vulnerabilities.
• Regularly review and enhance security incidents, posture, and system configurations while integrating relevant external threat intelligence.
• Provide support to the business by adhering to ITIL standards for managing incidents and service requests.
• Prepare detailed technical analyses and executive-level reports on security events and incidents.
• Participate in the design and architecture of Security systems.

Qualifications And Experience

• Bachelors degree in information security or equivalent experience
• Minimum 7 years experience working in the IT Security field
• Any certifications including OSCP, CCSP, SC-100, SC-200, SC-300, SC-400, SC-500 highly valued
• Extensive experience in information security, spanning architecture and operations
• Deep understanding of security technologies, standards, and best practices
• Expertise in managing security incidents and conducting risk assessments
• Strong knowledge of emerging security threats and technologies

Skills

• English at business level
• Extensive knowledge of traditional Microsoft environments (Active Directory, GPO, PKI, DNS)
• Strong expertise in Microsoft 365 Defender (Endpoint Security, Identity Protection, and Cloud Security)
• Strong expertise with Azure Cloud security and Microsoft 365 ecosystems
• Proficient in managing alerts from SIEM tools, especially Sentinel with Microsoft 365 and Azure
• Solid understanding of Microsoft Windows/Server and Linux offensive security attack techniques vectors
• In-depth knowledge of EDR and EPP solutions, particularly within Microsoft environments
• Exposure to penetration testing tools, firewalls, routers, and switches is advantageous
• Eager to learn new technologies quickly in a fast-paced and ever-evolving environment
• Strong organizational skills, flexibility, and a high sense of personal responsibility
• Proficient scripting abilities, including regex, with experience automating security tasks
• Comprehensive understanding of IT systems, TCP/IP networking, and security implications within AD

COMPETENCIES AND BEHAVIOURS

• Good communications skills
• Highly organized and able to collaborate with virtual teams
• Strong interests in hybrid infrastructures and Microsoft 365 and Azure technologies
• Proven analytical and problem-solving abilities
• Curious and passionate about security, security incidents, detection and threat hunting
• Ability to effectively prioritise and execute tasks in a high-pressure environment
• Ability to design and draft creative and cost-effective solutions
• Result-driven, with a strong sense of service and excellence