Offensive Security Analysts at Investec Asset Management

Job description

We are expanding the team responsible for Cyber Security across the Investec Group and we have the following positions available in Sandton and Cape Town:

Penetration Testers: If you are the type of person that makes a web application break by just firing up BurpSuite, mobile apps cry when you look at them or enjoy chaining a few low risk bugs into one glorious exploit; then you should join our team and break stuff to your hearts content. An OSCP certification will be highly beneficial.

Red Teaming: Our Red Team members are responsible for researching new TTP's (Tools, Techniques and Procedures) of advanced attackers and then simulating those threats across the group against the various business units, in order to identify weaknesses and improve our defences. Previous Red Teaming experience will be highly beneficial.

Incident Responders / Threat Hunters: As an Incident Responder your job is to monitor the alerts generated by all our monitoring tools, respond quickly and efficiently in order to minimise the impact on the business and figure out where our defences failed so we can prevent it from happening again. When you are not responding to incidents, you are expected to actively hunt for threats, across the group, using our EDR tool of choice and other systems at your disposal.

Malware Reverse Engineers: If you are one of those rare people that likes to dig through binaries, we need your skills in figuring out if we have been targeted by some dodgy organisation or if we are just seeing the noise out there like everyone else. On those rare occasions that you are not knee deep in IDA Pro, you will typically be hunting for threats, improving our monitoring, responding to incidents or even trying your hand at pentesting.

Why work at Investec?

You will be part of a diverse and fast paced team of highly technical and like minded individuals and be able to make a real difference in securing the organisation, instead of just going through the motions and delivering a report.

At Investec we don't box people, so in addition to your core focus, you will have the opportunity to gain experience in all the other security disciplines and move around untill you find your perfect role

Mastery, autonomy, and purpose is yours for the taking