Security Engineer

Job not on LinkedIn

🕒 November 5

🇿🇦 South Africa – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 15%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.Why this score:

• Open for 8 days.
• Jobs at this company usually fill in 68 days.
• No salary listed.

Apply Now

Customize resume + cover letter

Find Similar Remote Jobs

☆ Save☑️ Mark as applied❌ Hide

Report problem

StructureIt

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2006

💼 Consulting

📦 Logistics

💳 Fintech

Consulting • Logistics • Fintech

StructureIt is a technology consultancy that designs, builds and delivers custom software solutions and data platforms for capital markets and financial services. The company focuses on data engineering, application development and Artificial Intelligence to automate workflows, unify fragmented datasets, and provide audited, compliant reporting (SOC2/FSQS) for banks, asset managers, lenders, trustees and other financial institutions. StructureIt combines domain expertise in structured credit and commercial real estate with engineering and AI capabilities to offer B2B products and managed projects across small to enterprise clients.

📋 Description

• Penetration-test StructureIt’s estate on a schedule and after major changes • Build penetration tests for delivered systems from threat models and run them in the build pipeline • Coordinate external penetration and phishing tests and track findings to closure • Set controls for staff and agents using AI, including approved tools and models, permissions, keys, client data, third-party skills and MCP servers • Test AI-enabled systems for prompt injection, data leakage and excessive agency • Build AI agents and skills that automate security checks • Administer Microsoft Entra ID users, groups, Conditional Access policies, SSO and SCIM integrations • Manage device compliance with Intune and Defender for Endpoint, including BYOD checks and remediation • Investigate security alerts and incidents and document findings • Threat-model infrastructure, SaaS integrations and changes using MITRE ATT&CK • Define security mitigations and detections • Run vulnerability management with OpenVAS/Greenbone and Dependency-Track • Implement and evidence ISO 27001 controls and complete client security questionnaires • Maintain Palo Alto firewalls, GlobalProtect VPN and Zscaler Private Access, including PAN-OS upgrades • Maintain Azure virtual networks, private DNS zones, Key Vault, SQL access and virtual machine lifecycle • Raise and document change requests for infrastructure and configuration changes • Write and maintain scripts to automate repeat tasks • Resolve Jira Service Management requests and incidents within SLAs • Manage joiners, movers and leavers, including account creation, role changes, access removal and evidence capture • Provision, configure, wipe and replace Windows and macOS laptops • Maintain asset records and manage SaaS licences and access across Google Workspace, Microsoft 365, Atlassian, Slack and AI tools • Measure baselines and agree success targets during the first month

🎯 Requirements

• At least five years in IT, infrastructure or software, with three or more years in a role where security was the main job • Penetration testing of web applications, APIs, internal networks, Active Directory and Azure using tools such as Burp Suite or OWASP ZAP • Threat modelling with STRIDE or MITRE ATT&CK • Working knowledge of the OWASP Top 10 for LLM Applications • Hands-on Microsoft Entra ID and Active Directory administration, including designing and enforcing Conditional Access policies • Experience with SSO using SAML/OIDC and SCIM provisioning • Microsoft Intune and Defender for Endpoint experience • Support of Windows, macOS and Linux endpoints • Microsoft Azure infrastructure experience, including networking, DNS and Key Vault • Experience with firewalls, site-to-site VPNs and client VPNs • Incident investigation and response • Vulnerability management through to closure • Daily use of AI tools such as Claude, ChatGPT or Gemini • Scripting in PowerShell, Bash or Python • Experience working from a ticketing system with SLAs, such as Jira Service Management • Following documented processes and capturing evidence for each task • ISO 27001 or a similar control framework • Clear writing for tickets, change requests and audit evidence • Advantageous: OSCP, CREST CRT, PNPT, CISSP, CISM, CCSP, SC-300, AZ-104, digital forensics, Palo Alto PAN-OS, GlobalProtect, Zscaler Private Access, Google Workspace administration, AWS, testing LLM applications or agents in production, or building AI agents • Must have run a penetration test and written the report, handled a real incident, and designed and operated a security control • Must be willing to perform hands-on IT engineering and support alongside security work • Practical interview exercise involving threat modelling and testing a deliberately vulnerable web application with an LLM feature • Must walk through an incident handled

🏖️ Benefits

• Freedom to work with minimal meetings • Remote work option within South Africa • Practical exercise/interview opportunity to use AI tools • Opportunity to work with AI security, penetration testing, Microsoft security, Azure infrastructure, and IT engineering

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume