Threat Intelligence Engineer

The purpose of this role is to provide technical security expertise and assurance across all technical components of the Security Operations Centre (SOC) service, ensuring that Old Mutual retains effective ownership, governance, and accountability for SOC capabilities delivered through a third‑party service provider.

The role is accountable for conducting technical assessments, technical verification, and technical approvals across SOC tooling, architecture, detection engineering, and incident handling processes, while identifying and articulating technical gaps, risks, and improvement opportunities.

In addition, the role provides hands‑on technical support to Old Mutual’s cloud infrastructure as an extension of the Cloud Security team, ensuring SOC and cloud security controls are aligned, effective, and fit‑for‑purpose within Old Mutual’s technology landscape.

The role will be a Manager of Self with oversight of the SOC Service Provider engaging both internal and external stakeholders.

Minimum Requirements

Bachelor's degree in Information Security, Computer Science, Information Technology, Engineering, or a related discipline.

Minimum 5 years' experience in Cyber Security, with at least 3 years focused on Threat Intelligence, Security Operations Centre (SOC), Threat Detection Engineering, or Incident Response.

Proven experience working with enterprise security technologies including SIEM, EDR/XDR, threat intelligence platforms, and security monitoring tools.

Experience developing and operationalising threat intelligence capabilities, including threat hunting, adversary tracking, indicators of compromise (IOCs), and threat-led detection use cases.

Demonstrated experience supporting or overseeing managed security service providers (MSSPs) or outsourced SOC providers.

Hands-on experience securing cloud platforms, preferably Microsoft Azure, including cloud-native security monitoring and incident investigation.

Understanding of cyber security frameworks and standards such as NIST Cybersecurity Framework, MITRE ATT&CK, ISO 27001, and CIS Controls.

Experience performing technical security assessments, validating security controls, identifying security risks, and providing remediation recommendations.

Strong stakeholder engagement skills with the ability to communicate technical security risks and recommendations to both technical and non-technical audiences.

Education

NQF Level 7 - Degree, Advance Diploma or Postgraduate Certificate or equivalent (Required)

Operational & Technical Assurance

Governance, Oversight & Decision Support

Stakeholder & Service Provider Engagement

Building threat intelligence framework to protect the network

SOC Platform and Services Support

Personal Capability & Professional Development

Maintain up‑to‑date expertise in SOC technologies, cloud security, threat detection engineering, and incident response practices.

Pursue continuous professional development through relevant certifications, industry forums, and threat intelligence awareness.

Contribute to continuous improvement of Old Mutual’s internal technical security knowledge base and practices.

Decision‑Making Authority & Scope

Independent authority:

Conduct technical assessments, technical verification, and technical approvals within agreed security and architecture frameworks. Identify and formally raise technical risks, gaps, and control weaknesses with supported evidence and recommendations.

Decisions requiring driving, consultation or escalation:

Material architectural changes, tooling replacements, or significant risk acceptances must be escalated to senior security and technology leadership for approval.

Impact & scope:

Influences SOC effectiveness, maturity, detection quality, and overall security resilience.

Adaptive Thinking, Application Development, Computer Literacy, Confidentiality, Data Compilation, Data Compression, Data Controls, Data Modeling, Data Privacy, Data Recovery, Digital Literacy, Gateway Servers, IT Network Security, Probing Questions, Test Case Management