Cybersecurity Principal Technical Specialist - Dfa

ACCOUNTABILITIES & RESPONSIBILITIES (KEY PERFORMANCE AREAS & TASKS)

Technical Security Architecture & Engineering

• Design, build and continuously harden security architecture across the network, IT infrastructure and application layers including firewalls, switches, routers and other core network elements; define reference architectures and secure-by-design standards; lead Zero Trust and network segmentation implementation, including Cloudflare Zero Trust/SASE access.

Network & Telecom Infrastructure Security

• Secure the fibre access and transport network end to end (FTTB, FTTH/GPON/XGS-PON access electronics, OLT/ONU, IP/MPLS core, DWDM optical transport, BGP/routing security, DNS); configure and harden firewalls, switches and routers and other network elements; harden NOC/OSS systems and network management platforms; defend against DDoS and routing-layer attacks using Cloudflare and related edge/WAF controls.

Enterprise IT & ERP Systems Security

• Secure core IT infrastructure (Windows/Linux server estate, Active Directory/IAM, virtualisation, public cloud) and business-critical ERP/OSS-BSS/billing systems using the Microsoft security stack (Defender, Purview) for endpoint, cloud, identity and data protection; embed application and API security, including SAST/DAST and secure SDLC practices

Security Operations, Detection & Incident Response

• Own the CrowdStrike Falcon platform (full stack EDR/XDR, identity and cloud security) and other SIEM/SOC tooling, threat detection and threat hunting; lead technical incident response, digital forensics and containment; work with the Arctic Wolf managed detection and response (MDR) partnership and other MSSP/SOC partners on technical detection and response. Provide technical scenario design and hands-on facilitation support for incident-response tabletop exercises, which are governed and coordinated by GRC/Manager: Information Security.

Vulnerability & Penetration Testing Technical Support

• Provide the deep technical execution behind the Group's vulnerability management and penetration-testing programmes operating Tenable Nessus and Tenable.io, performing hands-on remediation and hardening, and providing technical execution/participation in penetration tests and red-team exercises. Programme governance (scheduling, reporting, third-party sourcing) sits with GRC/Manager: Information Security; this role owns the technical fix and validation.

Identity, Access & Cryptography

• Design and maintain privileged access management (PAM)/IAM, multi-factor authentication, PKI, certificate lifecycle and key management across network and IT domains.

Governance, Risk & Compliance Technical Support

• Translate Group policy and frameworks (NIST CSF, ISO 27001, POPIA), owned and maintained by GRC/Manager: Information Security, into implemented technical controls and audit evidence; provide technical input and subject-matter expertise to risk assessments and audits.

Technology Evaluation & Vendor Engagement

• Evaluate and select security and network technologies; provide technical oversight of security/MSSP vendor relationships and proof-of-concepts.

Leadership & Technical Mentorship

• Lead and develop a small technical security engineering team; set technical standards and act as the Group's senior technical escalation point for complex security engineering problems across DFA, Vuma and other operating companies.

Innovation & Emerging Technology

• Track and pilot emerging security and network technologies (AI-assisted threat detection, SASE/SSE, cloud-native and container security) and drive adoption where they add value.

Miscellaneous

• Perform any other work-related duties and responsibilities that may be assigned from time to time by management.

Requirements

Competencies and Minimum Requirements:

Knowledge, qualifications and experience

• Bachelor's degree: in computer science, information technology, cybersecurity, computer/electronic engineering, or a related technical field.

Professional technical certification at least one from each of the following domains:

• Offensive/technical security: OSCP, CEH, GIAC GPEN/GWAPT, or CompTIA PenTest+
• Security management/architecture: CISSP or CCSP
• Network security: Cisco CCNP Security/CCIE Security, or equivalent (Fortinet NSE, Palo Alto PCNSE)
• ITIL (Foundation or above)
• Continuous professional development: expected to maintain current certifications and stay abreast of emerging threats, network technologies (PON evolution, 5G backhaul, SASE) and regulatory change.
• Honours or relevant Master's degree: in cybersecurity, network engineering or information systems (ideal).
• Cloud security certification: AWS Certified Security - Specialty, Microsoft SC-100, or equivalent.
• Detection/incident response: GIAC GCIH/GCIA/GDSA or SANS equivalent.
• Vendor/platform certification: in the Group's core technology stack e.g. CrowdStrike Certified Falcon Administrator/Responder, Tenable certifications, Microsoft SC-200/SC-300/SC-400, or Cloudflare certifications is an advantage.
• Minimum 10 years' working experience in cybersecurity and/or network/IT engineering, with at least 6 years in hands-on technical security engineering (not purely governance or management).
• Technical mastery: demonstrated deep expertise across network security, IT infrastructure security and application/ERP security, and security frameworks (NIST, ISO 27001, COBIT, MITRE ATT&CK).
• Telecom/network operator experience: experience within a network operator, ISP or telecommunications business is strongly preferred, ideally including exposure to FTTB and/or FTTH/GPON access networks and IP/MPLS or optical transport networks, alongside conventional enterprise IT and ERP environments.
• Operational track record: leading technical incident response, and providing hands-on technical execution/support into vulnerability management and penetration-testing programmes.
• Team leadership: experience leading or mentoring a technical security team.