Information Security Analyst - Sandton, South Africa - Discovery Ltd.
Description
Business Unit:
Discovery Central Services
Function:Information Security
Date:31 Jul 2023- Discovery - Information Governance and Security- Information Security Analyst - PenTester
About Discovery
- Discovery's core purpose is to make people healthier and to enhance and protect their lives. We seek out and invest in exceptional individuals who understand and support our core purpose, and whose own values align with those of Discovery. Our fastpaced and dynamic environment enables smart, selfdriven people to be their best. As global thought leaders, Discovery is passionate about innovating in order to not only achieve financial success, but to ignite positive and meaningful change within our society.
About (Information Governance and Security) - The Information Governance and Security function within the Discovery Group aims to provide assurance that the organisation's information assets are adequately protected against threats on a continual basis. This is achieved by finding the right balance of information security and business freedom.
Key Purpose
Areas of responsibility may include but not limited - Work with relevant stakeholders to determine penetration testing requirements and
- Plan and create penetration methods, scripts and tests
- Carry out penetration testing to expose weaknesses in security
- Simulate security breaches to test a system's relative security
- Create reports and recommendations from findings, including the security issues uncovered and level of risk
- Advise on methods to fix or lower security risks to systems
- Present findings, risks and conclusions to relevant stakeholders
- Consider the impact the 'attack' will have on the business and its users
- Understand how the flaws identified could affect a business, or business function, if they're not fixed.
- Remain abreast with the latest attack methodologies and tactics
- Ability to work in a team environment, outgoing and interpersonal skills
- Ability to work according to project deadlines, under pressure and cope with a highly stressful environment.
- Must be passionate about information security and be current with trending security related topics
- Has solid technical skills to operate independently and support others within a high performing security team.
- Ability to operate in high demand and pressure environment
- Logical reasoning
- Relevant degree in Computer Science / Computer Engineering advantageous
- Relevant Security certifications (CEH, GPEN, OSCP, CREST,etc)
- 2 years experience in Red team engagements and threat analysis
- Mastery of Linux/Mac/Windows operating systems including Bash, PowerShell and Python.
- Network/Wireless Penetration Testing
- Ability to understand and modify code in a diverse range of programming languages and frameworks
- Proficiency in cryptographic protocols and cipher suites
- Thorough understanding of network protocols, data on the wire, and covert channels
- Source code reviews.
- Familiarity with penetration testing methodology and standards
- EMPLOYMENT EQUITY
More jobs from Discovery Ltd.
-
Service Consultant
Sandton, South Africa - 1 week ago
-
Data Scientist
Sandton, South Africa - 1 week ago
-
Internal Audit Manager
Sandton, South Africa - 1 day ago
-
Clinical Specialist
Sandton, South Africa - 1 week ago
-
Data Steward
Sandton, South Africa - 1 week ago
-
Functional Head- Digital Customer Experience
Sandton, South Africa - 1 week ago