Information Security Engineer L1

About the Role

At Derivco, we build the technology behind world-class online gaming experiences. We work at global scale in one of the most tightly regulated industries there is, and keeping our platforms, data and people secure is central to everything we do.

Responsibilities

• You'll join a team of seven engineers in Pretoria, Durban and the Isle of Man, and learn each area alongside a specialist mentor.
• You'll rotate across every area the team covers. You'll learn each one with a specialist, then take on more of it yourself:
• What you'll bring
• Nice to have: SC-900, AZ-900, CompTIA Security+ or a similar certification; exposure to SIEM, vulnerability scanning, endpoint security or Linux.
• What success looks like
• Identity and access: manage our identity platforms (users, groups, apps, lifecycle workflows, license hygiene), and process and review access requests against least privilege.
• Privileged access: support privileged access management, bastion and jump-host access, and privileged-access reviews.
• Cloud security: triage Azure and Microsoft 365 security posture findings and help teams fix them.
• Endpoint security: support our XDR platform: agent coverage, policy tuning and alert triage, escalating to senior team members when needed.
• Data protection: support DLP policies and sensitivity labelling.
• Vulnerabilities and lifecycle: track remediation of vulnerabilities and findings, and support retiring end-of-life operating systems.
• Compliance and audit: gather evidence and produce metrics for PCI DSS and ISO 27001 audits, keep records audit-ready, and track control issues and risks.
• Automation: script repetitive work in PowerShell, Python or KQL, and contribute to security-as-code (Terraform, Azure DevOps) through peer-reviewed change control.
• About 1–3 years' experience in IT or information security, for example in security operations, IT support, infrastructure or a security platform role.
• A relevant degree or diploma (e.g. Computer Science, Information Security or Information Systems), or equivalent hands-on experience.
• A broad grounding in IT and security, including identity (Active Directory / Entra ID), Windows and Azure basics, and networking fundamentals.
• A clear understanding of core security concepts such as least privilege, MFA, patching and logging.
• Some scripting experience in PowerShell or Python.
• Curiosity, the ability to learn new tools quickly, and comfort switching between tasks.
• Clear communication and good documentation habits. Cover only works when handovers are clean.
• Have professional courage to manage stakeholders when an access request or change breaks policy.

Requirements

• About 1–3 years' experience in IT or information security, for example in security operations, IT support, infrastructure or a security platform role.
• A relevant degree or diploma (e.g. Computer Science, Information Security or Information Systems), or equivalent hands-on experience.
• A broad grounding in IT and security, including identity (Active Directory / Entra ID), Windows and Azure basics, and networking fundamentals.
• A clear understanding of core security concepts such as least privilege, MFA, patching and logging.
• Some scripting experience in PowerShell or Python.
• Curiosity, the ability to learn new tools quickly, and comfort switching between tasks.
• Clear communication and good documentation habits. Cover only works when handovers are clean.
• Have professional courage to manage stakeholders when an access request or change breaks policy.

Preferred Qualifications

• SC-900, AZ-900, CompTIA Security+ or a similar certification; exposure to SIEM, vulnerability scanning, endpoint security or Linux.
• What success looks like
• Within six months, you're a trained backup across every platform the team runs. Routine access requests, finding triage and audit-evidence work run smoothly through you, which frees our senior engineers for roadmap projects. Over time, you'll grow into a specialist area and move up our security engineering career path.