Information Security Consultant at Sanlam Group

What will make you successful in this role?

• Perform formal penetration tests on web-based applications, networks and computer systems
• Conduct physical security assessments of servers, systems and network devices
• Design and create new penetration tools and tests
• Probe for vulnerabilities in web applications, fat/thin client applications and standard applications
• Pinpoint methods that attackers could use to exploit weaknesses and logic flaws
• Employ social engineering to uncover security holes (e.g. poor user security practices or password policies)
• Incorporate business considerations (e.g. loss of earnings due to downtime, cost of engagement, etc.) into security strategies
• Research, document and discuss security findings with management and IT teams
• Review and define requirements for information security solutions
• Work on improvements for security services, including the continuous enhancement of existing methodology material, monitoring capabilities and preventative controls.
• Provide feedback and verification as an organization fixes security issues
• Although the focus is on Offensive security this role will work closely with the defensive security disciplines (Blue Team) and assist in development of systems to automate and improve response times of this team as well.

Additional Requirements

• Minimum 3 - 5 Penetration testing experience
• Scripting skills like Perl, Javascript, SQL
• Python coding
• .Net Coding skills
• Experience working with Kali toolset and other open source and COTS hacking tools
• Grade 12
• Completed a pen testing course like HBN, CEH, OSCP or SANS 504, SANS 560, SANS 561 (or equivalent experience)
• The incumbent will be required to Certify his/her skills be completing certification exams over time (CEH/GPEN/OSCP) etc.

Qualification And Experience

• Degree or Diploma and/or required Certification with 3 to 5 years related experience.

Knowledge And Skills

• Incident Investigations
• Document Auditing
• Risk management
• Reporting and administration
• Quality, compliance and accreditation

Personal Attributes

• Interpersonal savvy - Contributing through others
• Decision quality - Contributing through others
• Plans and aligns - Contributing through others
• Optimises
• work processes - Contributing through others

Core Competencies

• Cultivates innovation - Contributing through others
• Customer focus - Contributing through others
• Drives results - Contributing through others
• Collaborates - Contributing through others
• Being resilient - Contributing through others