Senior Security & Compliance Engineer

Upstream

. Monitor and respond to security events, managing escalation and acting as a liaison during security incidents .

Posted 11/3/2026full-timeJohannesburg • South AfricaSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in security analysis, vulnerability management, and compliance frameworks, with a strong ability to communicate technical concepts effectively to diverse audiences. Proficient in conducting security audits, penetration testing, and maintaining security policies to ensure organizational compliance.

Highest-signal resume keywords

TCP/IP KnowledgeLinux Network Stack ExpertiseVulnerability Assessment MethodologiesSIEM Solutions ExperienceSecurity Standards Knowledge

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Network Traffic AnalysisWeb Application Penetration TestingSecurity Baselines ImplementationConfiguration Management ControlsData Encryption TechnologiesCloud Security ArchitectureISO 27001 KnowledgeNIST Cybersecurity FrameworkSOC 2 CompliancePython Development

Soft Skills

Strong Attention to DetailSolid Communication SkillsTeam PlayerDeadline ManagementFlexible Work Style

Tools & Technologies

Cisco IPS SystemsCheck Point FirewallsDLP SolutionsEndpoint Protection SolutionsWeb Application FirewallsIdentity and Access Management ProductsVulnerability Management PlatformsSIEM Solutions

Industry Keywords

Vulnerability Management LifecycleSecurity AuditsPenetration TestingForensic AnalysisCompliance PostureSecurity PoliciesClient Assurance ReviewsTechnical Security Findings

Tech Stack

Tools & technologies

CloudCyber SecurityFirewallsLinuxPythonTCP/IP

About the role

Key responsibilities & impact

Monitor and respond to security events, managing escalation and acting as a liaison during security incidents
Serve as a dedicated security analyst for critical projects
Lead the vulnerability management lifecycle, overseeing installation and patching efforts
Conduct security audits, penetration testing, evidence collection, and forensic analysis
Drive and own technical tasks through completion within time and technological constraints
Contribute to end-user security education and awareness
Maintain and update the compliance posture, ensuring security policies and standards remain current and effective
Serve as a primary technical resource for security-related client discussions
Articulate technical concepts to various audiences
Provide security content and review for RFPs, bids, and client assurances

Requirements

What you’ll need

Excellent knowledge of TCP/IP
Comprehensive understanding of the core Linux network stack
Expert proficiency in network traffic and protocol analysis
Expertise in vulnerability assessment and scanning methodologies
Expertise in network service enumeration
Hands-on web application penetration testing experience
Hands-on experience developing, implementing, and auditing security baselines
Experience with configuration management controls and patch management strategies across operating systems, application platforms, and critical data services
Deep knowledge and hands-on experience with SIEM solutions and vulnerability management platforms
Experience implementing and managing Cisco or Check Point IPS systems and firewalls
Proficiency with DLP and endpoint protection solutions, including application control and device control
Experience with web application firewalls (WAF)
Familiarity with Identity and Access Management (IDAM) products
Experience with data encryption technologies and products
Knowledge of cloud and mobile security architecture
Experience in datacenter protection strategies
Demonstrable knowledge of ISO 27001, NIST Cybersecurity Framework, SOC 2, and other security standards and compliance frameworks
Practical experience translating technical controls into formal, auditable security policies and procedures
Proven ability to document security testing results, audits, and posture assessments for internal leadership and external client assurance reviews
Solid oral and written communication skills
Experience presenting technical security findings and strategy to C-level executives and external clients
High-quality Python or shell development experience is a plus
Prior experience in a network position is a plus
Track record of meeting deadlines in challenging situations
Strong attention to detail
Flexible work style to ensure quality standards are met
Strong team player capable of providing guidelines and assistance to peers

Benefits

Comp & perks

Competitive base salary and benefits, directly dependent on the candidate’s qualifications and skills
Equal-opportunity employment
Reasonable accommodations for disabled employees