Systems Engineer II (Vulnerability Management) - Shoprite Group

The purpose of the Senior Systems Engineer is to advise on and effectively coordinate the remediation of complex, scanned and reported systems vulnerability concerns raised by the security teams. This role facilitates the technical support, system administration and fit-for-purpose solutions (i.e., Patching) with the respective systems support teams.

This role leverages in-depth system engineering knowledge of various systems engineering operations (Linux and Microsoft Operating Systems, Integration, Database Management, etc.) to develop, implement and maintain systems vulnerability processes and documentation.

This role advises and assists systems to support teams with systems vulnerability analysis, understanding and remediation as per escalated security report, whilst managing system vulnerability resolutions as per agreed service levels and quality standards. This role is part of a team of System and Security Engineers and supporting assigned system teams, applications, and/or associated technologies in the enterprise.

Job Category: IT

Job Objectives

System Vulnerability Management administration and coordination:

• Efficiently coordinate the resolution of technical support for upgrades, change requests, improvements, fixes, and overall structure and operations according to agreed Service Level Agreement (SLA) and quality standards.
• Manage the escalation of systems vulnerability issues with various systems support teams and ensure provide relative feedback on all stages of the resolution as per the agreed SLA.
• Analyse technical system vulnerability reports from technology partners/vendors and internal security teams and identify impacted systems and relevant stakeholders for remediation processes.
• Effectively advise system support teams on systems vulnerability issues and remediation priorities, ensuring that the relevant system support teams understand the technical details and remediation requirements of the security report.
• Proactively manage systems vulnerability remediation process with relevant system teams, including coordinating inputs from various stakeholders to deliver on required system changes.
• Conduct research and recommend fit-for-purpose solutions to improve systems or systems vulnerability management processes within the broader Shoprite IT infrastructure.
• Effectively manage all system change requests, applying established change management guidelines, developing and updating systems design documentation, including supporting regression testing and providing demos of the changes incorporated.
• Ensure the vendors comply with Shoprite standards and best practices.

Qualifications

• Degree or Diploma in Information Systems, Computer Science or related field - (essential)
• Security certification like CompTIA Security+, Systems Security Certified Practitioner (SSCP), etc., - (highly beneficial).

Experience

Essential

• +3 years experience as a Systems Engineer or similar role with solid knowledge and experience in designing, implementing and administering systems engineering solutions for a large IT infrastructure operation, including systems engineering understanding of various IT systems operations (I.e., End-point management, virtualization, cloud engineering, operating system management, database management, etc.), and enterprise system applications (Microsoft, Google, SAP, etc.).
• Experience with virtualization technology.

Desirable

• Experience with Vulnerability Management toolsets.
• Solid experience in incident response, diagnostic activities, Root Cause Analysis (RCA), Corrective Action Plans, and advanced troubleshooting.
• In-depth experience in documenting environment and processes.

Knowledge and Skills

Essential

• Knowledge and coordination experience of technical support activities, including stakeholder management and communication within broader IT operations.
• Strong proficiency in MS Office 365.

Desirable

• Technical knowledge of system security compliance and practice in IT systems operations with relevant regulations (PCI DSS, ISO standards, POPIA, etc.) or working within those frameworks.
• Knowledge of standard security guidelines.