Country: South Africa
City/State Location: Remote
Job Type: Permanent
Does the idea of chasing adversaries on the internet and thwarting threats excite you?
Are you a great problem solver?
Do you want to learn more about how adversaries use publicly available information on social media to target organizations?
If YES, then we have an exciting role for you!
Avenu Technologies is a growing leader in prop tech and financial lending services, with headquarters in Utah, and footprints throughout the world. We combine exceptional technology, talent, best practices and strategic relationships with game-changing solutions.
We are looking to hire an experienced and qualified Senior SecOps Engineer who will have the opportunity to set the strategy and technology for monitoring, detection and initial investigations of security incidents, and play a proactive role to secure all infrastructure, liaise with stakeholders to perform root cause analysis and trend analysis of security threats and issues, and so much more!
Responsibilities
- Implement and monitor security measures for the protection of computer systems, networks and information
- Identify and define system security requirements
- Create and maintain standard security operating procedures and protocols
- Work with the TecOps team to develop technical solutions with security tools and processes to help mitigate security vulnerabilities along with automating repeatable tasks
- Work with the TecOps and GSD teams to deploy security software and hardware, and regular updates as needed to secure and protect networks, workstations, server and cloud infrastructure.
- Check firewalls, load balancers and data encryption technologies in order to determine when a replacements or updates are needed
- Setup Monitoring and Alerting and monitor networks and systems security events for intrusions
- Update policies that ensure all systems follow regulatory security standards and compliance
- Investigate & Troubleshoot to determine root cause of security incidents
- Review server and network infrastructure hardening rules regularly
- Setup and run vulnerability and/or penetration testing quarterly for all products and services including internal and public facing systems.
- Conduct Static Analysis of codebases and work with relevant stakeholders
- Review, audit and configure firewall rules and access control list on physical and/or cloud infrastructure
- Audit, review and setup of AWS AM, AWS Policies and Roles
Qualifications
- South African ID or valid RSA Work Permit
- Relevant security framework certification such as CISSP, CompTIA Security+, CISM, or similar
Experience
- Minimum 3 years’ experience in a Security role
- Experience working with cloud services such as AWS
- Experience working with cloud tools such as Security Hub / Guard Duty / Prowler or Seamonster
- Experience with installing, configuring and maintaining vulnerability assessment and SIEM tools
- Experience with Static Analysis tools
- Fluent with Linux & Microsoft operating systems
- Strong understanding of Networking and experience with network protocols, hardware and software such Firewalls, Load Balancers etc.
- Experience with installing, configuring and maintaining IDS
- Able to work on call when necessary
Benefits and Perks
Along with an incredibly unique opportunity that offers unmatched potential for personal and professional growth, Avenu offers a fun and casual work environment that provides each team member with the best tools and proper support to do amazing and rewarding work. In addition, we offer all employees the following benefits:
- Competitive Base Salary
- Share Allocation
- Medical Aid, Provident Fund and Risk cover
- Generous Paid Time Off policy
- Remote Work
- Flexible Working Hours
- And so much more!
Benefits/perks listed may vary depending on the nature of your employment with Avenu and the country where you work.
Please reach out to us on talent@avenutech.com with your resume and cover letter, clearly indicating which role you are applying for. Should you not hear from us within two weeks, please consider your application unsuccessful.
PROTECTION OF PERSONAL INFORMATION POLICY (POPI)
In line with The Protection of Personal Information Act (POPIA) which came into effect 01 July 2021, we are obliged by legislation to ensure that reasonable measures are implemented and followed to protect your privacy and the right to access of information.
CANDIDATES:
DATA INFORMATION
By uploading your CV and profile to our website or in response to a specific job advert, we will collect, use and store the following personal data about you:
- The data you have provided in e-mail correspondence, a covering letter, your Curriculum Vitae (CV) as well as any other written correspondence.
- The personal data you have provided on our application form which include:
- Title / Surname / First Names / ID or Passport Number / Preferred Name / Nationality / Work Permit Status / Contact Telephone Numbers / Email Address / Home Address / Languages Spoken/ Equity Status / Gender / Operational Requirements / Disclosure regarding criminal history and previous disciplinary history and any other data you provide to us during interviews.
- Personal Data that is provided by your referees by way of telephonic or written references.
In the event that you fail to provide personal data relevant to the application process or specific position you applied for or provide inaccurate data, we may not be able to consider and process your application further.
DATA COLLECTION
Your data is collected by us from the following sources:
- Yourself, being the candidate, our website, a specific response to an advert or by referral from a 3rd party Recruitment Associate.
- Publicly accessible sources such as LinkedIn, using the personal information as shown in your personal profile.
- Referees as stipulated by you. This data will include your full name, position held, period of employment, responsibilities held, work performance during employment as well as reason for leaving.
- We highly recommend that you remove any non-essential or sensitive personal information from your CV and profile.
DATA USAGE
Your personal data and sensitive personal data will be us for the following purposes:
- Communicate with you about available vacancies and the recruitment process.
- Assess your skills, qualifications and suitability for applicable positions.
- Obtain references and background checks when necessary.
USE OF SENSITIVE PERSONAL DATA
Your sensitive personal data will only be used as far as permitted by Law.
- The data used about your nationality and/or employment equity status will be for the purpose of ensuring you comply with the clients Employment Equity policy requirements as necessary for a specific role.
- Data about your disability status will be used to ensure that appropriate provisions are available in the event of tests or interviews that must be conducted.
DATA SHARING
By registering as a candidate or applying for a specific job, your CV will be shared to Avenu Technologies, Inc, its affiliates and 3rd Party Associates for the specific purpose of recruitment.
Your personal information will not be shared or sold to any 3rd party which is not affiliated to Avenu Technologies, Inc and will only be used for the sole purpose of a job application and the recruitment process.
DATA STORAGE
- Your personal data will be retained by us for a period of 3 years after your last application date. We further retain your personal data to be considered for any similar positions that you might be suitable for. Please ensure your data is kept up to date at all times by logging into our online portal or in writing via email.
- All personal data will be safely and securely stored in accordance with the Data Protection and Privacy laws.
- Avenu Technologies, Inc will store your personal data until you ask us in writing to delete your CV and profile or if you have not engaged with our services for a period of 3 years or more.
PARTICIPATION & RIGHT OF ACCESS
You have the right to:
- Request access to your personal data held. This allows you to receive a copy of the personal data on our records and to ensure we are lawfully processing it.
- Request the correction of your personal data which will enable you to have any inaccurate or incomplete data corrected.
- Request to erase, halt or object your personal data being processed or used. In this event, please email talent@avenutech.com
GENERAL:
By submitting information to Avenu Technologies, Inc and its affiliates, irrespective as to how such information is submitted, you consent to the collection, collation, processing and storing for and of such information and the use and disclosure of such information in accordance with this policy.