Discovery – Information Governance and Security

Information Security Analyst – PenTester   

About Discovery

Discovery’s core purpose is to make people healthier and to enhance and protect their lives. We seek out and invest in exceptional individuals who understand and support our core purpose, and whose own values align with those of Discovery. Our fast-paced and dynamic environment enables smart, self-driven people to be their best. As global thought leaders, Discovery is passionate about innovating in order to not only achieve financial success, but to ignite positive and meaningful change within our society.

About (Information Governance and Security)

The Information Governance and Security function within the Discovery Group aims to provide assurance that the organisation’s information assets are adequately protected against threats on a continual basis. This is achieved by finding the right balance of information security and business freedom.

Key Purpose

Perform penetration tests using various techniques that mimic real-world attacks to exploit vulnerabilities on web and mobile applications within the Discovery Group.

Areas of responsibility may include but not limited 

• Work with relevant stakeholders to determine penetration testing requirements and
• Plan and create penetration methods, scripts and tests
• Carry out penetration testing to expose weaknesses in security
• Simulate security breaches to test a system's relative security
• Create reports and recommendations from findings, including the security issues uncovered and level of risk
• Advise on methods to fix or lower security risks to systems
• Present findings, risks and conclusions to relevant stakeholders
• Consider the impact the 'attack' will have on the business and its users
• Understand how the flaws identified could affect a business, or business function, if they're not fixed.
• Remain abreast with the latest attack methodologies and tactics

Personal Attributes and Skills

• Ability to work in a team environment, outgoing and inter-personal skills
• Ability to work according to project deadlines, under pressure and cope with a highly stressful environment.
• Must be passionate about information security and be current with trending security related topics 
• Has solid technical skills to operate independently and support others within a high performing security team. 
• Ability to operate in high demand and pressure environment 
• Logical reasoning 

Qualifications & Experience

• Relevant degree in Computer Science / Computer Engineering advantageous 
• Relevant Security certifications (CEH, GPEN, OSCP, CREST,etc) 
• 3-5 years experience in penetration testing including web, mobile and cloud applications 
• 2 years experience in Red team engagements and threat analysis 
• Mastery of Linux/Mac/Windows operating systems including Bash, PowerShell and Python. 
• Network/Wireless Penetration Testing 
• Ability to understand and modify code in a diverse range of programming languages and frameworks 
• Proficiency in cryptographic protocols and cipher suites 
• Thorough understanding of network protocols, data on the wire, and covert channels 
• Source code reviews. 
• Familiarity with penetration testing methodology and standards 

EMPLOYMENT EQUITY   
                             
The Company’s approved Employment Equity Plan and Targets will be considered as part of the recruitment process. As an Equal Opportunities employer, we actively encourage and welcome people with various disabilities to apply.