{"id":4035633,"url":"https://alion.io/job/old-mutual-limited-threat-intelligence-engineer","title":"Threat Intelligence Engineer","company":{"id":5366,"name":"Old Mutual Limited","domain":"oldmutual.com","url":"https://alion.io/company/oldmutual","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":88,"open_postings":46,"ghost_share":0,"stale_share":0.609,"repost_share":0.087,"time_to_fill_p50_days":12,"computed_at":"2026-11-10T06:52:35Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Cape Town, South Africa","Johannesburg, South Africa"],"countries":["ZA"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"Azure","optional":false},{"name":"ISO 27001","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-11-10T20:07:40Z","employer_posted_date":"2026-11-10","last_verified_at":"2026-11-11T01:50:36Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Let's Write Africa's Story Together!\nOld Mutual is a firm believer in the African opportunity and our diverse talent reflects this.\nJob Description\nThe purpose of this role is to provide technical security expertise and assurance across all technical components of the Security Operations Centre (SOC) service, ensuring that Old Mutual retains effective ownership, governance, and accountability for SOC capabilities delivered through a third-party service provider.The role is accountable for conducting technical assessments, technical verification, and technical approvals across SOC tooling, architecture, detection engineering, and incident handling processes, while identifying and articulating technical gaps, risks, and improvement opportunities.\nIn addition, the role provides hands-on technical support to Old Mutual’s cloud infrastructure as an extension of the Cloud Security team, ensuring SOC and cloud security controls are aligned, effective, and fit-for-purpose within Old Mutual’s technology landscape.\nThe role will be a Manager of Self with oversight of the SOC Service Provider engaging both internal and external stakeholders.\nKey Responsibilities / Accountabilities\nOperational & Technical Assurance\nGovernance, Oversight & Decision Support\nStakeholder & Service Provider Engagement\nBuilding threat intelligence framework to protect the network\nSOC Platform and Services Support\nPersonal Capability & Professional Development\nMaintain up-to-date expertise in SOC technologies, cloud security, threat detection engineering, and incident response practices.\nPursue continuous professional development through relevant certifications, industry forums, and threat intelligence awareness.\nContribute to continuous improvement of Old Mutual’s internal technical security knowledge base and practices.\nDecision-Making Authority & Scope\nIndependent authority:\nConduct technical assessments, technical verification, and technical approvals within agreed security and architecture frameworks.Identify and formally raise technical risks, gaps, and control weaknesses with supported evidence and recommendations.\nDecisions requiring driving, consultation or escalation:\nMaterial architectural changes, tooling replacements, or significant risk acceptances must be escalated to senior security and technology leadership for approval.\nImpact & scope:\nInfluences SOC effectiveness, maturity, detection quality, and overall security resilience.\nMinimum Requirements:\nBachelor's degree in Information Security, Computer Science, Information Technology, Engineering, or a related discipline.\nMinimum 5 years' experience in Cyber Security, with at least 3 years focused on Threat Intelligence, Security Operations Centre (SOC), Threat Detection Engineering, or Incident Response.\nProven experience working with enterprise security technologies including SIEM, EDR/XDR, threat intelligence platforms, and security monitoring tools.\nExperience developing and operationalising threat intelligence capabilities, including threat hunting, adversary tracking, indicators of compromise (IOCs), and threat-led detection use cases.\nDemonstrated experience supporting or overseeing managed security service providers (MSSPs) or outsourced SOC providers.\nHands-on experience securing cloud platforms, preferably Microsoft Azure, including cloud-native security monitoring and incident investigation.\nUnderstanding of cyber security frameworks and standards such as NIST Cybersecurity Framework, MITRE ATT&CK, ISO 27001, and CIS Controls.\nExperience performing technical security assessments, validating security controls, identifying security risks, and providing remediation recommendations.\nStrong stakeholder engagement skills with the ability to communicate technical security risks and recommendations to both technical and non-technical audiences.\nSkills\nAdaptive Thinking, Application Development, Computer Literacy, Confidentiality, Data Compilation, Data Compression, Data Controls, Data Modeling, Data Privacy, Data Recovery, Digital Literacy, Gateway Servers, IT Network Security, Probing Questions, Test Case ManagementCompetencies\nAction OrientedCommunicates EffectivelyCultivates InnovationEnsures AccountabilityManages ComplexityNimble LearningOptimizes Work ProcessesPersuadesEducation\nNQF Level 7 - Degree, Advance Diploma or Postgraduate Certificate or equivalent (Required)Closing Date\n17 November 2026 , 23:59The appointment will be made from the designated group in line with the Employment Equity Plan of Old Mutual South Africa and the specific business unit in question.\nThe Old Mutual Story!","description_format":"text","description_chars":4609,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity","Professional development"],"hiring_locations":[{"name":"South Africa","iso":"ZA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Threat Intelligence","Information Security","Commercial & Retail Banks","Incident Response"],"lifecycle":[{"event":"open","at":"2026-11-10T20:07:40Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":12,"reasons":["conf:1","win:early","comp:brand"],"computed_at":"2026-11-11T03:40:38Z"},"pay":null,"html_url":"https://alion.io/job/old-mutual-limited-threat-intelligence-engineer","json_url":"https://alion.io/job/old-mutual-limited-threat-intelligence-engineer.json","meta":{"generated_at":"2026-11-11T03:40:38Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3196,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":5366},"rest":"https://alion.io/mcp/rest/get_company?id=5366"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fold-mutual-limited-threat-intelligence-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fold-mutual-limited-threat-intelligence-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fold-mutual-limited-threat-intelligence-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/old-mutual-limited-threat-intelligence-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fold-mutual-limited-threat-intelligence-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4035633}},{"tool":"search_jobs","arguments":{"company":"oldmutual.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4035633},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}