Information Security Analyst

Discovery Limited; Johannesburg; On-site; ZAR 700,000 - 1,000,000; Full time

Job summary

Discovery Limited is seeking an Information Security Analyst - PenTester to perform penetration testing on web, mobile and cloud environments within the Discovery Group. You will work with stakeholders to define testing requirements and deliver thorough assessments with actionable recommendations.

The role requires 3–5 years of pentesting experience, red team exposure, and strong Linux/Windows/Mac skills, plus scripting and programming knowledge.

Qualifications

• 3–5 years of penetration testing experience including web, mobile and cloud apps
• 2 years in red team engagements and threat analysis
• Mastery of Linux/Mac/Windows OS including Bash, PowerShell and Python
• Ability to understand and modify code in various programming languages
• Proficiency in cryptographic protocols and cipher suites
• Thorough understanding of network protocols, data on the wire, and covert channels
• Source code reviews
• Familiarity with penetration testing methodology and standards
• Basic AI skills

Responsibilities

• Work with relevant stakeholders to determine penetration testing requirements
• Plan and create penetration methods, scripts and tests
• Carry out penetration testing to expose weaknesses in security
• Simulate security breaches to test a system's security
• Create reports and recommendations from findings, including risk levels
• Advise on methods to fix or lower security risks to systems
• Present findings, risks and conclusions to stakeholders
• Consider business impact of the simulated attack
• Stay updated with latest attack methodologies and tactics

Skills

Teamwork

Deadline driven

Information security

Independent working

High-pressure environment

Logical reasoning

Education

Degree in Computer Science / Computer Engineering

Security certifications (CEH GPEN OSCP CREST)

Tools

Linux

macOS

Windows

Bash

PowerShell

Python

Job description

Select how often (in days) to receive an alert:

Information Security Analyst

Business Unit: Discovery Central Services

Function: Information Security

Date: 7 Sept 2026

Discovery - Information Governance and Security

Information Security Analyst - PenTester

About Discovery

Discovery's core purpose is to make people healthier and to enhance and protect their lives. We seek out and invest in exceptional individuals who understand and support our core purpose, and whose own values align with those of Discovery. Our fast-paced and dynamic environment enables smart, self-driven people to be their best. As global thought leaders, Discovery is passionate about innovating in order to not only achieve financial success, but to ignite positive and meaningful change within our society.

About (Information Governance and Security)

The Information Governance and Security function within the Discovery Group aims to provide assurance that the organisation's information assets are adequately protected against threats on a continual basis. This is achieved by finding the right balance of information security and business freedom.

Key Purpose

Perform penetration tests using various techniques that mimic real-world attacks to exploit vulnerabilities on web and mobile applications within the Discovery Group.

Areas of responsibility may include but not limited

• Work with relevant stakeholders to determine penetration testing requirements and
• Plan and create penetration methods, scripts and tests
• Carry out penetration testing to expose weaknesses in security
• Simulate security breaches to test a system's relative security
• Create reports and recommendations from findings, including the security issues uncovered and level of risk
• Advise on methods to fix or lower security risks to systems
• Present findings, risks and conclusions to relevant stakeholders
• Consider the impact the 'attack' will have on the business and its users
• Understand how the flaws identified could affect a business, or business function, if they're not fixed.
• Remain abreast with the latest attack methodologies and tactics

Personal Attributes and Skills

• Ability to work in a team environment, outgoing and inter-personal skills
• Ability to work according to project deadlines, under pressure and cope with a highly stressful environment.
• Must be passionate about information security and be current with trending security related topics
• Has solid technical skills to operate independently and support others within a high performing security team.
• Ability to operate in high demand and pressure environment
• Logical reasoning

Qualifications & Experience

• Relevant degree in Computer Science / Computer Engineering advantageous
• Relevant Security certifications (CEH, GPEN, OSCP, CREST,etc)
• 3-5 years experience in penetration testing including web, mobile and cloud applications
• 2 years experience in Red team engagements and threat analysis
• Mastery of Linux/Mac/Windows operating systems including Bash, PowerShell and Python.
• Ability to understand and modify code in a diverse range of programming languages and frameworks
• Proficiency in cryptographic protocols and cipher suites
• Thorough understanding of network protocols, data on the wire, and covert channels
• Source code reviews.
• Familiarity with penetration testing methodology and standards
• Basic AI skills

EMPLOYMENT EQUITY

The Company's approved Employment Equity Plan and Targets will be considered as part of the recruitment process. As an Equal Opportunities employer, we actively encourage and welcome people with various disabilities to apply.