Junior Infosec Engineer
White Hat Gaming · Information Security team · Cape Town
Owning the AWS WAF rule set
- Country blocks,
JA3andJA4TLS fingerprint blocks and rate limiting across client web ACLs - Custom scope-down rules so protections fit specific endpoints and sites without blocking real players
- Worked with frontend developers to roll out WAF SDKs on web and mobile
Writing and maintaining SIEM detections
- Detections for systems and newly discovered vulnerabilities
- Keep the SIEM healthy, including fixing log retention so ingestion stays unthrottled
- Triage of suspicious emails reported by staff
From alert to post-mortem
- Investigate and resolve security alerts and incidents quickly
- Run RCAs and post-mortem debriefs once the issue is closed
- Liaise with external pentesters and drive findings to fixes with internal teams
Hardening the AWS estate
- Provision new client AWS accounts through Terraform and GitHub PRs
- MFA delete on critical S3 buckets, lifecycle policies for ECR images
- ECR scan filters that focus on critical images, cutting cost and noise
Policy and ISO 27001 readiness
- Wrote and reviewed security policies for company-wide attestation
- Helped set up MDM policies on the road to ISO 27001 certification
- Automated user off-boarding across company systems
Security awareness across the company
- Run the company-wide phishing campaign and present results to senior management
- Helped evaluate phishing simulation vendors for the next programme
- Host a monthly security session open to the whole company