Upstream

Senior Security & Compliance Engineer

Upstream
Apply
4 days ago
Johannesburg, South AfricaSenior

Responsibilities

  • Monitor and respond to security events, manage escalations, and act as a liaison during security incidents.
  • Serve as a dedicated security analyst for critical projects.
  • Lead vulnerability management, including installation and patching efforts.
  • Conduct security audits, penetration testing, evidence collection, and forensic analysis.
  • Drive technical security tasks to completion within time and technology constraints.
  • Contribute to end-user security education and awareness.
  • Maintain and update the organization’s compliance posture, policies, and standards.
  • Provide technical security support for client discussions and commercial engagements, including RFPs, bids, and client assurances.
  • Document security testing results, audits, and posture assessments for leadership and external client assurance reviews.

Requirements

  • Excellent knowledge of TCP/IP and the core Linux network stack.
  • Expertise in network traffic and protocol analysis, vulnerability assessment and scanning, network service enumeration, and web application penetration testing.
  • Hands-on experience developing, implementing, and auditing security baselines, configuration management controls, and patch management strategies across operating systems, applications, and data services.
  • Deep knowledge of SIEM solutions and vulnerability management platforms.
  • Experience implementing and managing Cisco and Checkpoint IPS systems and firewalls.
  • Proficiency with DLP, endpoint protection, application control, and device control solutions, plus experience with web application firewalls and identity and access management products.
  • Experience with data encryption technologies and products.
  • Python and shell development experience is a plus.
  • Knowledge of cloud and mobile security architecture and experience with datacenter protection strategies.
  • Knowledge of ISO 27001, the NIST Cybersecurity Framework, SOC 2, and related security governance and compliance practices.
  • Ability to translate technical controls and security findings into formal, auditable policies, procedures, and professional documentation.
  • Strong written and verbal communication skills, including presenting technical security findings and strategy to C-level executives and external clients.
  • Prior network-position experience is a plus.
  • Ability to provide technical guidance to peers and meet deadlines in challenging environments.

Benefits

  • Hybrid workplace in Johannesburg, South Africa.
  • Full-time employment.
  • Competitive base salary and benefits dependent on qualifications and skills.
  • Opportunity to work with a dynamic, technically skilled, and motivated team in a fast-paced environment.

Tech Stack

Categories

Upstream

About Upstream

201-500 employees

Upstream builds a mobile marketing automation and digital commerce platform for mobile network operators and consumer brands, combining omnichannel messaging, operator billing, and anti-fraud protection. It operates as a privately held provider of software and managed services, supporting revenue growth and customer acquisition across 45+ markets in Latin America, Africa, the Middle East, and Southeast Asia. Founded in 2001 and headquartered in Athens, Greece, it works with more than 60 mobile network operators worldwide.

Contact me