Cyber security disciplines we recruit

Fifteen disciplines, each with its own market, its own scarcity and its own way of going wrong. These pages set out what we place, how we screen it and what the supply actually looks like in South Africa and the UK.

Every discipline

CISOs & security leadersConfidential CISO, deputy CISO and head of security search, plus divisional leadership mandates.

SOC analystsL1 to L3 analysts, detection engineers, shift leads and SOC managers across 24/7 functions.

Security analystsVulnerability management, control testing, first-line generalists and the broad analyst roles.

Security engineersEngineers who build and operate controls — tooling, automation and platform security.

Network security engineersFirewall, SASE, ZTNA and segmentation engineering across on-premise and cloud estates.

Security architectsEnterprise, cloud, solution and identity architecture, and the design authority that goes with it.

Cloud securityAWS, Azure and GCP security engineering, DevSecOps and Kubernetes security specialists.

Penetration testersInfrastructure, web, mobile and red team testers, including CREST and CHECK-aligned briefs.

Digital forensics & incident responseIncident responders, forensic and malware analysts, cloud forensics and IR leadership.

Threat intelligenceCTI analysts, threat hunters, researchers and the leads who make the function pay for itself.

Identity & access managementIAM and IGA engineers, PAM specialists, identity architects and customer identity.

OT, ICS & IoT securityPlant-facing industrial security engineers, OT architecture, monitoring and IEC 62443 work.

GRC & complianceISO 27001, SOC 2, POPIA and audit-facing governance, risk and compliance specialists.

Information security & riskCyber risk managers, second-line information security officers, assurance and third-party risk.

Cyber sales & go-to-marketAccount executives, pre-sales engineers, channel and customer success for vendors and MSSPs.

How to use these pages

If you are hiring, the discipline page for your role explains how we screen it and where the market is genuinely thin — useful before you finalise a brief. If you are looking, it sets out what employers in that discipline actually assess, which is not always what the advert says.

Several disciplines overlap deliberately. Cloud security and architecture, GRC and information security risk, SOC and threat hunting all share candidates, and the right search often crosses two of them. We will say when your brief sits between pages.

Where we recruit

Across South Africa and the United Kingdom. See all locations for the detail on each market.

Industries we work with

Not sure which discipline your role sits in?

That is a normal problem and a short conversation usually settles it.

I'M HIRING I'M LOOKING