Threat Detection and Response Engineer

What will you do?

The Threat Detection and Response Engineer is responsible for operating and enhancing the organization’s defensive security technologies across network, cloud, and database environments. This role focuses on identifying, mitigating, and preventing threats by managing next-generation security controls, monitoring critical systems, and supporting investigation and response activities. The ideal candidate combines strong technical depth in network and cloud security with hands-on expertise in threat detection and prevention.

What will make you successful in this role?

Minimum Qualification Required

•    Grade 12 Senior Certificate
•    CompTIA Security+, CySA+, Network+ or related certifications
•    Fortinet NSE, (vendor-neutral acceptance)
•    AZ-500, MS-500, or equivalent cloud certs
•    GIAC certifications are a strong advantage

Minimum Experience

•    5+ years in Security Operations, Network Security, and Threat Management.
•    Strong understanding of network protocols, such as IPv4,/6 OSPF, BGP, DNS, DHCP, and VLANs.
•    Experience with network troubleshooting using tools like ping, traceroute, Wireshark, and other diagnostic utilities.
•    Experience with network security, including firewalls, VPNs, NAT, access control lists (ACLs), and intrusion detection/prevention systems (IDS/IPS).
•    Must have a broad understanding of SD WAN and MPLS networks.
•    Knowledge of network redundancy and high availability configurations
•    Extensive knowledge of cloud networking (AWS, Azure, etc.) is an advantage.
•    NGFW, and threat prevention technologies
•    SIEM platforms (e.g., Sentinel)
•    EDR/XDR platforms
•    Cloud-native security tooling
•    Database auditing and activity monitoring
•    Must be proficient in both verbal and written communication in English.

   
Deliverables include, but will not be limited to

•    Ability to analyze and interpret logs from multiple systems.
•    Source NAT (SNAT), Destination NAT (DNAT), and Port Address Translation (PAT)
•    Firewall policies, VPN topologies
•    Threat detection and network visibility
•    Assist in NAT design for cloud, DMZ, and enterprise architectures.
•    Apply network knowledge in support of security investigations and threat triage.
•    Embed security-by-design.
•    Collaborate with Security/Compliance on CIS, NIST, ISO 27001, SOC 2, PCI DSS, POPIA.
•    Basic scripting capability (PowerShell, Python) is an advantage.

Competencies Required

•    Organization and time-management
•    Communication
•    Problem-solving
•    Teamwork
•    Life-long learner
•    Accountability

Knowledge and Skills

Personal Attributes

Build a successful career with us

We’re all about building strong, lasting relationships with our employees. We know that you have hopes for your future – your career, your personal development and of achieving great things. We pride ourselves in helping  our employees to realise their worth. Through its five business clusters – Sanlam Fintech, Sanlam Life and Savings, Sanlam Investment Group, Sanlam Allianz, Santam, as well as MiWay and the Group Office – the group provides many opportunities for growth and development.

Core Competencies

Turnaround time

The shortlisting process will only start once the application due date has been reached. The time taken to complete this process will depend on how far you progress and the availability of managers. Deadline to apply: 30 April 2026. 

Our commitment to transformation