Cybersecurity recruitment in South Africa

We are a specialist cyber security recruitment firm based in Cape Town, working with South African organisations that need security people they can actually rely on. One discipline, two markets, no general IT desk.

The South African hiring picture

South African security teams compete for talent with employers in London, Amsterdam and Dubai who pay in stronger currencies and hire remotely. The result is a market where the technically strongest candidates are rarely on a job board, and where a role advertised openly attracts volume rather than quality.

Three pressures shape most of the briefs we take. Financial services and insurance are building or expanding security operations capability, which drives demand for SOC analysts and detection engineering skills. POPIA has made governance, risk and compliance a board-level concern rather than an audit afterthought, so GRC and compliance hiring has grown. And cloud migration continues to outpace the supply of engineers who can secure what has been built.

Roles we place in South Africa

Security operationsL1 to L3 SOC analysts, threat hunters, detection engineers, SOC managers.

Engineering & architectureSecurity engineers, cloud security engineers, security architects, IAM specialists.

Offensive securityPenetration testers, red teamers, application security testers.

LeadershipCISOs, heads of security, security programme directors.

Governance & riskGRC analysts, POPIA and ISO 27001 specialists, third-party risk.

Analysis & intelligenceSecurity analysts, vulnerability management, threat intelligence.

Where we work

CAPE TOWN: Our home market. Financial services, insurance, SaaS and offshore delivery centres. Cape Town cyber security recruitment.
JOHANNESBURG: Gauteng clients served remotely from Cape Town — banking, mining, telecoms and insurance head offices. Johannesburg cyber security recruitment.
NATIONALLY: Pretoria, Durban and fully remote mandates anywhere in South Africa.
UNITED KINGDOM: UK security roles delivered from our Cape Town base. UK cyber security recruitment.

How we work

We take a brief in a conversation, not a form. Before we search we want to understand your stack, your team's current shape, the threat landscape you actually face, and what a successful first six months looks like. Then we go to our network rather than to an advert.

Every candidate we put forward has been spoken to about the specific role. Our shortlists are short. If we cannot fill a role honestly, we say so early rather than sending approximate CVs to look busy.

More detail on our engagement models — contingency, retained search, RPO and contract staffing — is on the employers page.

Common questions

Where in South Africa do you recruit?

We are based in Cape Town and recruit nationally. Our client base is concentrated in the Western Cape and Gauteng, and we place into Durban, Pretoria and fully remote roles as well.

Do you only recruit cyber security roles?

Yes. Cyber security is the whole of our practice. We do not run a general IT desk, which is why we can hold a technical conversation about detection engineering or cloud security posture rather than matching keywords on a CV.

How long does a South African cyber search take?

For mid-level roles where our existing network covers the skill set, a shortlist in days is realistic. Senior and scarce-skill searches — cloud security architects, detection engineers, incident response leads — take longer because the honest answer is that the market is thin.

Can you help with scarce-skill and employment-equity requirements?

We work to the brief you set, including employment-equity targets, and we are transparent when a target and a skills reality are in tension rather than quietly missing it.

Explore further

Talk to us about your search

A short conversation is usually enough to tell you whether we can help.

I'M HIRING I'M LOOKING