Manager - Security Engineer Vulnerability and External Attack Surface Management

About this role

MTN’s Group Security Operations Centre (SOC) is looking for a security engineer based in Roodepoort, Gauteng. The role focuses on finding, ranking and fixing weaknesses across MTN’s internal systems and its internet-facing assets. The aim is to move the SOC from reacting to threats towards managing risk before it becomes a problem.

What you’ll do

• Run the full vulnerability management cycle, from discovery and validation through to prioritisation, remediation tracking and verification. This covers infrastructure, cloud, applications and telecom/OT assets.
• Operate and tune enterprise scanning platforms such as Tenable or Qualys, so that asset coverage is complete and accurate.
• Set risk-based remediation timelines and work with infrastructure, application and platform teams to close issues.
• Continuously map MTN’s internet-facing assets, including shadow IT, exposed services, certificates, domains and cloud footprints.
• Link external exposure with internal vulnerability and threat data to build one clear view of organisational risk.
• Rank findings by how easily they can be exploited, how critical the asset is and the threat context, rather than by raw counts. Lead targeted campaigns that show measurable drops in exploitable risk.
• Design and prototype AI-assisted workflows, using agentic AI and large language model platforms, to automate triage, enrichment, remediation guidance and reporting across MTN’s markets.

What you need

• A Bachelor’s degree in Computer Science, Information Security, Engineering or a related field, or equivalent practical experience.
• At least 6 years in information security, with 3 to 4 years focused on vulnerability management and/or attack surface management.
• Proven experience running enterprise vulnerability management and external attack surface management tools at scale.
• Hands-on scripting and automation skills in Python or PowerShell, plus data analysis ability.
• A proven record of reducing risk and delivering measurable remediation outcomes.
• Exposure to AI or agentic AI tools used in security operations (strongly preferred).
• Advantageous: OSCP, GIAC (such as GWAPT, GEVA or GCTI), CISSP, CEH or equivalent.
• Advantageous: cloud security certifications such as AZ-500, AWS Security Specialty or CCSP.
• Working knowledge of tools and frameworks such as Tenable, Qualys, Microsoft Defender EASM, Shodan, CVSS, EPSS, CISA KEV and MITRE ATT&CK. Also SQL, Power BI and SOAR or workflow automation.

Is this job for you?

This role suits an experienced security professional who enjoys hands-on technical work and wants to shape how a large operator manages risk. You should be curious about new threats, comfortable explaining technical risk to non-technical people, and keen to lead by example across teams.

Tips before you apply

• Have your CV ready with clear dates and job titles. Show your years in vulnerability or attack surface management separately, so the 3 to 4 year requirement is easy to check.
• Give examples with numbers. For instance, show how you cut exploitable findings or shortened remediation times.
• Describe any scripting, automation or AI-assisted work in concrete terms, naming the tools you used and the problem each one solved.