CYBER SECURITY SPECIALIST: RED TEAM

Woolworths; Wes-Kaap; On-site; ZAR 300 000 - 400 000; Full time

Job summary

A prominent retail company in Western Cape seeks a skilled red teamer to enhance its cyber security strategy. This technical role demands expertise in penetration testing and integration of security within DevSecOps practices. Ideal candidates will have relevant qualifications and experience in application security. This position offers a unique opportunity to contribute significantly to our cybersecurity efforts.

Qualifications

• Grade 12 and relevant degree/diploma/certifications.
• 3 years relevant experience in cyber security, up to 10 years in IT.
• Hands on practical experience in application security and penetration testing.

Responsibilities

• Identify vulnerabilities and validate controls across the environment.
• Support the team in responding to security incidents.
• Integrate security practices into DevSecOps and SDLC.

Skills

Application security

Penetration testing

DevSecOps knowledge

Automation

Mitre ATT&CK framework

Education

Relevant degree/diploma/certifications

Job description

Job category: FMCG, Retail, Wholesale and Supply Chain

Location: Western Cape

Contract: Permanent

Remuneration: Market Related

EE position: No

Introduction

We are searching for an energetic, output-driven red teamer to support the execution of the cyber security strategy and roadmap with a primary focus on red teaming, purple teaming and DevSecOps. You’ll be assisting the red team in their efforts to defend Woolworths against various cyber threats by helping mature our ability to test, validate and improve controls This includes penetration testing and helping maturing DevSecOps and application security. This is a technical role requiring practical experience in penetration testing, red teaming, SDLC security and DevOps. The role also requires good people skills to effectively interact and communicate with various stakeholders across Woolworths.

Responsibilities

• Work with the rest of the security operations team to proactively identify vulnerabilities and validate controls across the Woolworths environment.
• Support the team in responding to security incidents.
• Work with, and coordinate, external providers where and when relevant.
• Assist with maturing the red and purple teaming maturity, leveraging technology and automation with the goal of continual control validation.
• Integrate security practices into the SDLC and DevSecOps under the guiding principles of ‘shift left’ and ‘security by default’.
• Provide expert guidance on, and where relevant maintain and enhance the toolsets required for mature application security covering pen testing, secure coding, source code analysis and vulnerability management.
• Investigate new approaches, technologies, and automation to mature AppSec.
• Assist with AppSec training.
• Assist with managing a risk-based methodology for application and infrastructure penetration testing.
• Provide application and infrastructure penetration testing according to the methodology and where relevant, in line with compliance requirements (e.g., PCI).
• Help drive and validate remediation of findings.
• Consult with application development teams during projects and initiatives.
• Provide AppSec reporting for operational security dashboards.
• Provide application security guidance via documentation, standards, and collaboration.

Qualifications

• Grade 12 and relevant degree/diploma/certifications.
• 3 years relevant experience in cyber security, up to 10 years in IT.
• Hands on practical experience in application security and penetration testing.
• Experience in DevOps / DevSecOps and the ability to integrate security into the CI/CD processes.

Advantageous

• Relevant qualifications and certifications such as OSCP, OSWE, SANS and CREST.
• Practical experience with the MITRE ATT&CK framework is advantageous.
• Ability to script and automate processes.
• May be required to assist outside of working hours.