Cybersecurity Principal Technical Specialist - DFA

In brief

Overview This document outlines the role of a Cybersecurity Principal Technical Specialist at Maziv, specifically focusing on the DFA entity. This is a senior, hands-on technical leadership position responsible for designing, implementing, and maintaining robust security across network, IT infrastructure, and application layers, as well as leading security operations, incident response, and technical mentorship. What you will do * Design, build and continuously harden security architecture across the network, IT infrastructure and application layers — including firewalls, switches, routers and other core network elements; define reference architectures and secure-by-design standards; lead Zero Trust and network segmentation implementation, including Cloudflare Zero Trust/SASE access. * Secure the fibre access and transport network end to end FTTB, FTTH/GPON/XGS-PON access electronics, OLT/ONU, IP/MPLS core, DWDM optical transport, BGP/routing security, DNS; configure and harden firewalls, switches and routers and other network elements; harden NOC/OSS systems and network management platforms; defend against DDoS and routing-layer attacks using Cloudflare and related edge/WAF controls. * Secure core IT infrastructure Windows/Linux server estate, Active Directory/IAM, virtualisation, public cloud and business-critical ERP/OSS-BSS/billing systems using the Microsoft security stack Defender, Purview for endpoint, cloud, identity and data protection; embed application and API security, including SAST/DAST and secure SDLC practices. * Own the CrowdStrike Falcon platform full stack — EDR/XDR, identity and cloud security and other SIEM/SOC tooling, threat detection and threat hunting; lead technical incident response, digital forensics and containment; work with the Arctic Wolf managed detection and response MDR partnership and other MSSP/SOC partners on technical detection and response. Provide technical scenario design and hands-on facilitation support for incident-response tabletop exercises, which are governed and coordinated by GRC/Manager: Information Security. * Provide the deep technical execution behind the Group's vulnerability management and penetration-testing programmes — operating Tenable Nessus and Tenable.io, performing hands-on remediation and hardening, and providing technical execution/participation in penetration tests and red-team exercises. Programme governance scheduling, reporting, third-party sourcing sits with GRC/Manager: Information Security; this role owns the technical fix and validation. * Design and maintain privileged access management PAM/IAM, multi-factor authentication, PKI, certificate lifecycle and key management across network and IT domains. * Translate Group policy and frameworks NIST CSF, ISO 27001, POPIA, owned and maintained by GRC/Manager: Information Security, into implemented technical controls and audit evidence; provide technical input and subject-matter expertise to risk assessments and audits. * Evaluate and select security and network technologies; provide technical oversight of security/MSSP vendor relationships and proof-of-concepts. * Lead and develop a small technical security engineering team; set technical standards and act as the Group's senior technical escalation point for complex security engineering problems across DFA, Vuma and other operating companies. * Track and pilot emerging security and network technologies AI-assisted threat detection, SASE/SSE, cloud-native and container security and drive adoption where they add value. * Perform any other work-related duties and responsibilities that may be assigned from time to time by management. Requirements (from the original advert) * Bachelor’s degree: in computer science, information technology, cybersecurity, computer/electronic engineering, or a related technical field. * Professional technical certification — at least one from each of the following domains: * Offensive/technical security: OSCP, CEH, GIAC GPEN/GWAPT, or CompTIA PenTest+ * Security management/architecture: CISSP or CCSP * Network security: Cisco CCNP Security/CCIE Security, or equivalent Fortinet NSE, Palo Alto PCNSE * ITIL Foundation or above. * Continuous professional development: expected to maintain current certifications and stay abreast of emerging threats, network technologies PON evolution, 5G backhaul, SASE and regulatory change. * Honours or relevant Master’s degree: in cybersecurity, network engineering or information systems ideal. * Cloud security certification: AWS Certified Security – Specialty, Microsoft SC-100, or equivalent. * Detection/incident response: GIAC GCIH/GCIA/GDSA or SANS equivalent. * Vendor/platform certification: in the Group's core technology stack — e.g. CrowdStrike Certified Falcon Administrator/Responder, Tenable certifications, Microsoft SC-200/SC-300/SC-400, or Cloudflare certifications — is an advantage. * Minimum 10 years’ working experience in cybersecurity and/or network/IT engineering, with at least 6 years in hands-on technical security engineering not purely governance or management. * Technical mastery: demonstrated deep expertise across network security, IT infrastructure security and application/ERP security, and security frameworks NIST, ISO 27001, COBIT, MITRE ATT&CK. * Telecom/network operator experience: experience within a network operator, ISP or telecommunications business is strongly preferred, ideally including exposure to FTTB and/or FTTH/GPON access networks and IP/MPLS or optical transport networks, alongside conventional enterprise IT and ERP environments. * Operational track record: leading technical incident response, and providing hands-on technical execution/support into vulnerability management and penetration-testing programmes. * Team leadership: experience leading or mentoring a technical security team. Who should apply This role is suitable for a highly experienced and technically proficient cybersecurity professional with a strong background in network and IT engineering. The ideal candidate will have at least 10 years of overall experience, including a minimum of 6 years in hands-on technical security engineering, a proven track record in leading incident response, vulnerability management, and penetration testing support. They should possess multiple advanced technical certifications across offensive security, security management, and network security, with an ITIL Foundation or higher certification. Experience in a telecommunications or network operator environment is strongly preferred, and the ability to lead and mentor a technical security team is essential. A commitment to continuous professional development and staying current with emerging security and network technologies is also expected. Deadline Not specified Reference Original posting: https://www.myjobmag.co.za/job/cybersecurity-principal-technical-specialist-dfa-maziv Source: myjobmag

Summary drafted with AI assistance from the original advert. The advert itself is the authority — how we use AI.

At a glance

• At least 10 years of experience.

• AWS
• Linux

Extracted automatically from the advert; confirm requirements on the original listing.

Job description

Before you apply

• Confirm the requirements and closing date on the original listing (myjobmag). SPANi lists vacancies from other sites and may not reflect last-minute changes.
• Legitimate employers do not charge application, registration or training fees.
• Don't send your ID or bank details before you have confirmed the employer is real.

How to spot a job scam

Before you apply

• Read the full advert and confirm you meet the minimum requirements before applying.
• Tailor your CV headline and most recent experience to the job title and key skills.
• Note the closing date and reference number, and keep a copy of what you submit.
• Apply only through the employer or job board link — never pay to apply.