Cyber Security Intelligence Analyst at Discovery Limited

Job description

About Purple

Discovery’s intention is to expand our business model into banking (subject to Regulatory Approval), and to establish a brilliant, innovative full-service retail bank in South Africa. From a regulatory perspective, this involves a lengthy and complex process the outcome of which is not guaranteed. A two-step approval is required: Firstly to obtain authorisation to establish a bank – and thereafter, after complying with all the conditions, to apply for registration as a bank. The first step, authorisation to establish a banking presence (S13 (1) of the Banks Act 94 of 1990), has been completed. A banking business may only commence once registration as a bank has been granted and Discovery has embarked on this process.

We are looking for smart, energetic, experienced and dynamic achievers who take initiative and ownership, and who thrive on constant challenges and high-speed change to join us on this journey.

If you have an entrepreneurial mind and appreciate calculated risks, then the Discovery environment will liberate you to realise your full potential.

Key Purpose

The Cyber Security Intelligence Analyst identifies, analyses, investigates and mitigates cyber threats for Discovery Purple. This includes threats to staff, the business, systems information technology, and networks. By performing highly specialized incoming incident investigations the Cyber Security Intelligence Analyst translates the findings into useful intelligence within the business.

Areas of responsibility may include but are not limited to

• Understands the Discovery Purple banking environment, characterizing pertinent aspects of the operational environment to ensure threat analysis is relevant to the Purple environment.
• Establishes and maintains logging and monitoring capability for Discovery Purple’s security profile and base lining normal activity.
• Identifies possible network security threats by analysing log files from a variety of sources which may include; individual host logs, network traffic logs, firewall logs and intrusion detection system and IDS logs.
• Monitors external data sources to maintain the currency of cyber threat condition and determine which security threats may have an impact on the enterprise.
• Identifies vulnerabilities, evaluating current security posture and makes recommendations to initiate and expedite remediation.
• Performs reporting as a result of conducting cybersecurity defence analyses with the objective of keeping management and staff informed.
• Documents cybersecurity defence techniques, processes and guidance, for appropriate security operations personnel.
• Assists with the managing and reporting on security incident post-mortems and executive summaries to the management team.
• Updates and improves threat analysis procedures and reviews and improves information risk reference materials to improve the quality of security risk assessments and scenario planning.
• Serves as technical expert and liaison to colleagues and even law enforcement personnel in the event of investigations.
• Advises management on courses of action and sustainable improvements in threat identification and treatment.
• Actively engages with industry bodies such as SABRIC and relevant CERTs.

Personal Attributes and Skills

• Values driven
• Problem solving and analytical capabilities. Working knowledge of tools such as Splunk and ELK to build monitoring dashboards and management reporting
• Excellent written and verbal communication skills, with the ability to convey technical detail in clear and concise manner
• Proficiency in a variety of social media platforms, and news aggregators in the security space
• Ability to work under time constraints with minimal supervision
• Willingness to both issue and accept challenges to analytical conclusions

Education and Experience

• Bachelor of Technology or Bachelor of Science in Information Systems, Computer Science or Electronic Engineering
• CISSP, Certified Ethical Hacking, GIAC Network Forensic Analyst, GIAC Cyber Threat Intelligence (GCTI)
• 4-6 years in information and cyber security field
• Working knowledge of SAP core banking in Retail Banking Environment, Payments, Treasury and online banking channels.
• Some experience working with security architecture concepts e.g. SABS

EMPLOYMENT EQUITY

The Company’s approved Employment Equity Plan and Targets will be considered as part of the recruitment process. As an Equal Opportunities employer, we actively encourage and welcome people with various disabilities to apply.