Information Security Analyst

Discovery Limited; Sandton; On-site; ZAR 650,000 - 900,000; Full time

Job summary

Discovery Limited is seeking an Information Security Analyst – PenTester in Sandton, Gauteng to join the Information Governance and Security team. You will perform penetration tests that mirror real-world attacks on web and mobile applications within the Discovery Group.

The role requires hands-on expertise in planning tests, creating scripts, and delivering clear reports with risk-based recommendations to stakeholders. A strong security mindset and collaboration are essential.

Qualifications

• 3-5 years of penetration testing experience including web, mobile and cloud apps.
• Relevant security certifications (CEH, GPEN, OSCP, CREST, etc.).
• Degree in Computer Science/Engineering advantageous.
• Mastery of Linux/Windows/macOS.
• Familiarity with penetration testing methodology and standards.

Responsibilities

• Plan and create penetration methods, scripts and tests.
• Carry out penetration testing to expose weaknesses in security.
• Simulate security breaches to test a system's security posture.
• Create reports with findings, risk levels and recommendations.
• Advise on fixes to lower security risks to systems.
• Present findings and conclusions to stakeholders.
• Understand business impact of identified flaws if not fixed.
• Stay updated with latest attack methodologies and tricks.

Skills

Penetration Testing

Security Assessments

Linux/Windows/macOS

Scripting (Python, PowerShell)

Threat Analysis

Education

Computer Science degree

Security Certifications (CEH, GPEN, OSCP)

Tools

Linux

PowerShell

Python

Burp Suite

Nessus

Job description

Discovery – Information Governance and Security

Information Security Analyst – PenTester

About Discovery

Discovery’s core purpose is to make people healthier and to enhance and protect their lives. We seek out and invest in exceptional individuals who understand and support our core purpose, and whose own values align with those of Discovery. Our fast-paced and dynamic environment enables smart, self-driven people to be their best. As global thought leaders, Discovery is passionate about innovating in order to not only achieve financial success, but to ignite positive and meaningful change within our society.

About (Information Governance And Security)

The Information Governance and Security function within the Discovery Group aims to provide assurance that the organisation’s information assets are adequately protected against threats on a continual basis. This is achieved by finding the right balance of information security and business freedom.

Key Purpose

Perform penetration tests using various techniques that mimic real-world attacks to exploit vulnerabilities on web and mobile applications within the Discovery Group.

Areas of responsibility may include but not limited

• Work with relevant stakeholders to determine penetration testing requirements and
• Plan and create penetration methods, scripts and tests
• Carry out penetration testing to expose weaknesses in security
• Simulate security breaches to test a system's relative security
• Create reports and recommendations from findings, including the security issues uncovered and level of risk
• Advise on methods to fix or lower security risks to systems
• Present findings, risks and conclusions to relevant stakeholders
• Consider the impact the 'attack' will have on the business and its users
• Understand how the flaws identified could affect a business, or business function, if they're not fixed.
• Remain abreast with the latest attack methodologies and tactics

Personal Attributes and Skills

• Ability to work in a team environment, outgoing and inter-personal skills
• Ability to work according to project deadlines, under pressure and cope with a highly stressful environment.
• Must be passionate about information security and be current with trending security related topics
• Has solid technical skills to operate independently and support others within a high performing security team.
• Ability to operate in high demand and pressure environment
• Logical reasoning

Qualifications & Experience

• Relevant degree in Computer Science / Computer Engineering advantageous
• Relevant Security certifications (CEH, GPEN, OSCP, CREST,etc)
• 3-5 years experience in penetration testing including web, mobile and cloud applications
• 2 years experience in Red team engagements and threat analysis
• Mastery of Linux/Mac/Windows operating systems including Bash, PowerShell and Python.
• Network/Wireless Penetration Testing
• Ability to understand and modify code in a diverse range of programming languages and frameworks
• Proficiency in cryptographic protocols and cipher suites
• Thorough understanding of network protocols, data on the wire, and covert channels
• Source code reviews.
• Familiarity with penetration testing methodology and standards
• Basic AI skills

EMPLOYMENT EQUITY

The Company’s approved Employment Equity Plan and Targets will be considered as part of the recruitment process. As an Equal Opportunities employer, we actively encourage and welcome people with various disabilities to apply.