Security Specialist (Senior)

Discovery Limited; Sandton; On-site; ZAR 1,000,000 - 1,400,000; Full time

Job summary

Discovery Limited is seeking a Security Specialist Senior to lead cyber defense, detect threats, and respond to cyber events within the Information Governance and Security team. The role requires hands-on leadership for Blue/Red Team operations and collaboration with IT, security operations, and development teams to strengthen defenses.

You will drive incident response, conduct vulnerability assessments, and guide strategic improvements while reporting to senior management.

Qualifications

• IT related Diploma / Degree.
• Basic IT qualifications (A+, N+ or equivalent).
• AdvancedSecurity Qualifications (CISSP, CEH, OSCP, OWASP).

Responsibilities

• Optimise Blue/Red Team operations and coordinate with security teams.
• Prepare and execute incident response action plans; identify trends and improvements.
• Coordinate high-volume cyber security engagements and respond to security events.
• Systematically test and forensically detect system vulnerabilities.
• Develop an operational plan with KPIs and staff development.

Skills

Cyber security

Incident response

Threat detection

Security operations

Network security

Log analysis

Scripting (Python)

Education

IT related Diploma / Degree

A+/N+ or equivalent

AdvancedSecurity Qualifications (CISSP, CEH, OSCP, OWASP)

Tools

SIEM

Firewalls

IDS/IPS

Forensic tools

Packet analysis tools

Job description

Discovery – Information Governance and Security

Security Specialist Senior

About Discovery

Discovery’s core purpose is to make people healthier and to enhance and protect their lives. We seek out and invest in exceptional individuals who understand and support our core purpose, and whose own values align with those of Discovery. Our fast-paced and dynamic environment enables smart, self-driven people to be their best. As global thought leaders, Discovery is passionate about innovating in order to not only achieve financial success, but to ignite positive and meaningful change within our society.

About Information Governance And Security (IGS)

The Information Governance and Security function within the Discovery Group aims to provide assurance that the organisation’s information assets are adequately protected against threats on a continual basis. This is achieved by finding the right balance of information security and business freedom.

Key Purpose

The role is pivotal in detecting and responding to cyberevents which includes reviewing and continuously improving the management of the Cyber threats. The position requires strong technical and analytical expertise with sound leadership attributes. The primary focus is to ensure that all malicious activity is detected timely utilising and improving upon the cyber detection capabilities.

Areas of responsibility may include but not limited

• Optimise Blue / Red Team operations and maintain a working relationship with security operations teams, security officers, security architects, development, network, server and web teams
• Contributing information and recommendations to strategic plans and reviews.
• Preparing and completing Incident response action plans; identifying trends; determining system improvements; implementing change.
• Coordinate and manage hi volume complex Cyber Security focused engagements whilst also responding to and managing security events and engage in security investigations
• Systematically test and forensically detect system vulnerabilities,
• Conduct risk pathway analysis, assist with combating global system penetrations,
• Identify and elevate high priority events, prepare and present management risk and remediation assessment reports, and serve as a team lead to mitigate future attacks,
• Develop an operational support plan for the sustained success of the program – including KPIs of teams, training and development of staff and identify process improvements.

Personal Attributes And Skills

• Excellent knowledge of technology environments
• The ability to articulate security in non-technical business impact terms
• Customer Service Orientation, Result Orientation, Negotiation skills
• Personal organisation and time management skills
• Time and Task Delivery Management
• Professional Communication (written, verbal/presenting and listening)
• Interpersonal skills - Ability to build relationships with people from all different backgrounds and at different job levels

Essential

Qualifications & Experience

• IT related Diploma / Degree
• Basic IT qualifications (A+, N+ or equivalent)

AdvancedSecurity Qualifications (CISSP, CEH,OSCP, OWASPor Equivalent)

• 10+years IT Experience
• 10+years’ experience in Information Security across 4 or more domains
• 8+ years direct incident response, cyber security

Advantageous

• Relevant Security certifications (GPEN, OSCP,CREST,etc)
• Expertise with security assessment methodology, vulnerability Risk management, OWASP model, CVE ratings
• Advanced knowledge of networking protocols and equipment
• Comfortable with packet analysis and forensic tools
• Knowledge of a managed security service provider operating model.
• Firewalls, IDS/IPS, Web Firewalls, Sandboxing, and other security tools.
• Scripting with Bash, Batch, Perl, or Python – beneficial.
• Strong understanding of Unix/Linux operating systems.
• Ability to read web and application server logs to determine potential breaches.
• Ability to read and action upon logs from endpoint security and malware detection tools
• Ability to set strategic goals via cyber security industry trends in areas surrounding threat intelligence,
• SIEM technologies and correlation.
• Familiarity in cyber security forensics is a plus
• Network security certifications a plus

EMPLOYMENT EQUITY

The Company’s approved Employment Equity Plan and Targets will be considered as part of the recruitment process. As an Equal Opportunities employer, we actively encourage and welcome people with various disabilities to apply.