Security Engineer

Location: South African | Work Type: Remote | Job ID: J107297 About our client: Our client develops and supports software and data solutions across a variety of industries. They want you to get ahead of the market and stay there. They offer a combination of plug and play products that can be integrated with existing systems and processes and can also be customised to client needs. Their capabilities extend to big data engineering and bespoke software development, solutions are available as both cloud-based and hosted. What you will be doing: Conduct scheduled and post-change estate testing, build pipeline penetration tests with delivery teams, and coordinate external penetration and phishing tests. Set controls for staff and AI agent usage, test LLM-based systems for prompt injection and data leakage, and build security check agents. Administer Microsoft Entra ID (users, groups, conditional access, SSO/SCIM integrations) and manage endpoint device compliance via Intune and Defender. Investigate security alerts, perform infrastructure threat modelling using MITRE ATT&CK, manage vulnerabilities (OpenVAS/Greenbone), and implement ISO 27001 controls. Maintain Palo Alto firewalls, VPNs, Zscaler, and Azure cloud infrastructure, ensuring all changes are tracked with documented change requests and automation scripts. Resolve Jira Service Management tickets within SLAs, manage joiners/movers/leavers, handle laptop provisioning, and oversee SaaS licenses across platforms. What our client is looking for: 5 years in IT, infrastructure, or software, with 3 or more years in a dedicated security role. Skilled in testing web applications, APIs, internal networks, Active Directory, and Azure using tools such as Burp Suite or OWASP ZAP. Experience in threat modelling using STRIDE or MITRE ATT&CK, along with knowledge of the OWASP Top 10 for LLM Applications. Hands-on administration of Microsoft Entra ID and Active Directory, including Conditional Access, SSO (SAML/OIDC), and SCIM provisioning. Experience with Microsoft Intune and Defender for Endpoint across Windows, macOS, and Linux endpoints. Proficiency in Microsoft Azure networking, DNS, Key Vault, firewalls, and VPNs. Capable of incident investigation, response, and driving vulnerability management through to closure. Daily use of AI tools (Claude, ChatGPT, Gemini) and scripting proficiency in PowerShell, Bash, or Python. Experience working within ticketing systems like Jira Service Management, adhering to SLAs, and documenting processes. Familiarity with ISO 27001 or similar control frameworks, with strong writing skills for tickets, change requests, and audit evidence. Advantageous: Certifications such as OSCP, CREST CRT, PNPT, CISSP, CISM, CCSP, or Microsoft/Azure certifications (SC-300, AZ-104). Experience in digital forensics. Proficiency with Palo Alto PAN-OS, GlobalProtect, and Zscaler Private Access. Knowledge of Google Workspace administration and AWS. Experience in testing LLM applications or agents in production and building AI agents. For a more comprehensive list of opportunities that we have on offer, do visit our website - https://www.parvana.co.uk/careers Requirements Security Engineer, Remote, Penetration Testing, Microsoft Entra ID, Azure, ISO 27001, Jira, PowerShell, Python, Incident Response, LLM Security, CI/CD, Intune, Defender, Palo Alto, Zscaler