MTN Group Recruits Manager, Security Engineering, Incident Management & Automation (Johannesburg) – 2026

What the job involves

MTN Group is looking for a Manager – Security Engineering, Incident Management and Automation in its Group Information Security team (job ID 7892, MTN Level 3). The job is full time and hybrid, based at MTN's head office, the Innovation Centre in Fairland, Johannesburg. The contract type and salary are not stated.

You would run and improve the tools, monitoring and automation of MTN's Security Operations Centre (SOC), to detect and respond to cyber attacks faster. Your main tasks:

• Manage the technical performance of SOC platforms (SIEM, SOAR, EDR/XDR, NDR, email and cloud security tools).
• Build and improve detection rules and alerts based on the MITRE ATT&CK framework.
• Give technical leadership during security incidents: investigation, containment and recovery.
• Add and optimise security tools and log sources, and work with outsourced security providers.
• Build SOAR playbooks, APIs and automated workflows to cut manual work and response times.
• Help deploy approved AI-based security tools, in line with security standards.
• Support cyber defence projects: engineering designs, guidelines and technical documents.
• Track and report on SOC performance, and make sure controls follow MTN policies and regulations.

Who can apply

• A Bachelor's degree in computer science, IT, engineering, cyber security or a related field, or equivalent practical experience.
• At least one relevant certification. Examples: CISSP, CISM, GIAC (GCIA, GCIH, GMON, GPEN), OSCP, CEH, Microsoft SC-200 or AZ-500, or cloud security certificates.
• 4 to 6 years in information security or cyber security operations, including security monitoring, incident response or security tool administration, and automation in large enterprises. Telecoms experience is an advantage.
• Strong knowledge of SIEM and SOAR tools (such as Microsoft Sentinel or Splunk) and EDR/XDR tools (such as Microsoft Defender).
• Scripting skills (Python, PowerShell, KQL) and REST API integration.
• Practical knowledge of cloud security (Azure, AWS, GCP), networks and operating systems.
• Familiarity with AI security concepts and frameworks such as MITRE ATT&CK, NIST CSF, OWASP and Zero Trust.
• Skills: analysis, independence, teamwork and clear communication.
• MTN Group says it gives preference to candidates from designated groups under South Africa's Employment Equity Act.

Documents required

The offer does not list the documents. Expect to upload at least a CV on the online form, and read the instructions on the portal carefully. MTN says AI technology may be used to help shortlist candidates, and that applying means you consent to this use of your data.

Timeline

• Posted: 02/11/2026.
• Deadline: 09/11/2026 at 17:00. The time zone is not stated; if it is South African time, that is 16:00 in Cameroon.

How to apply

Apply only on MTN's official careers site, using the "Apply Now" button on the offer page (job ID 7892). Do not wait for the last day.

Our tips

• Show security incidents you handled and the detection rules or automations you built, with results.
• List your tools (Sentinel, Splunk, Defender) and certifications at the top of your CV.
• Check that you are allowed to work in South Africa before applying.

Beware of scams

Apply only through MTN's official careers site. A genuine application is never paid. Never send money by Mobile Money or any other means to someone who promises you this job.