Cyber Security Threat Analyst at Discovery Limited

Job Purpose 
The Cyber Security Threat Analyst identifies, analyses, investigates and mitigates cyber threats for Discovery Bank. This includes threats to staff, the business, systems information technology and networks. By performing highly specialized incoming incident investigations the Cyber Security Threat Analyst translates the findings into useful intelligence within the business to activate the appropriate response/remediation.  
 
Key Outcomes may include but are not limited to: 

• Understands the Discovery Bank environment, characterising pertinent aspects of the operational environment to ensure threat analysis is relevant to the environment.
• Establishes and maintains logging and monitoring capability for Discovery Bank’s security profile and base lining normal activity. 
• Monitors external data sources to maintain the currency of cyber threat condition and determine which security threats may have an impact on the enterprise. 
• Identifies vulnerabilities, evaluating current security posture and makes recommendations to initiate and expedite remediation.
• Performs reporting as a result of conducting cybersecurity defence analyses with the objective of keeping management and staff informed.
• Documents cybersecurity defence techniques, processes and guidance, for appropriate security operations personnel. 
• Assists with the managing and reporting on security incident post-mortems and executive summaries to the management team.
• Updates and improves threat analysis procedures and reviews and improves information risk reference materials to improve the quality of security risk assessments and scenario planning. 
• Serves as technical expert and liaison to colleagues and even law enforcement personnel in the event of investigations. 
• Advises management on courses of action and sustainable improvements in threat identification and treatment.
• Actively engages with industry bodies such as SABRIC and relevant CERTs.  

Personal Attributes and Skills

• Values driven
• Problem solving and analytical capabilities. Working knowledge of tools such as Splunk and vulnerability management to build monitoring dashboards and management reporting
• Excellent written and verbal communication skills, with the ability to convey technical detail in clear and concise manner
• Proficiency in a variety of social media platforms, and news aggregators in the security space
• Ability to work under time constraints with minimal supervision
• Willingness to both issue and accept challenges to analytical conclusions

Education and Experience: 

• Bachelor of Technology or Bachelor of Science with Information Systems, Computer Science or Electronic Engineering
• CISSP, Certified Ethical Hacking, GIAC Network Forensic Analyst, GIAC Cyber Threat Intelligence (GCTI)
• 4-6 years in information and cybersecurity security field
• Working knowledge of SAP core banking in Retail Banking Environment, Payments, Treasury and online banking channels.  
• Some experience working with security architecture concepts e.g. SABSA