Information Security Specialist at Discovery Limited

Key Purpose

Plan, design, implement and carry out security measures to protect the information assets . Analyse security event information, determine and respond to security incidents, and support the implementation of new security detection and protection technologies. Primary SME on capabilities and guide area on overall improvement of prevention techniques/capabilities

Areas of responsibility may include but not limited to
Primary Functions

• Build automation pipelines for all perimeter security functions
• Automate management of security components in the Cloud Platform
• Ensure adherence to the current security policies and standards.
• Assist on improvements on and utilize SIEM dashboards to review and monitor ongoing events.
• Respond to incidents, analyse security events to determine appropriate actions and identify security weaknesses
• Generate and provide reports to management to include current status and potential corrective courses of action
• Lead and drive related projects and critical tasks
• Develop, present and implement sound recommendations for mitigation and remediation.

Personal Attributes and Skills

• Ability to work in a team environment, outgoing and inter-personal skills
• Ability to work according to project deadlines, under pressure and cope with a highly stressful environment.
• Ability to troubleshoot complex infrastructure related problems
• Mature, optimistic, energetic and positive
• High degree of accuracy and attention to detail essential
• Self-motivated , self-thinker and pro-active
• Deadline driven and willing to work overtime when necessary
• Sound work ethics
• Team player
• Willing to learn and develop oneself
• Strong Document, Reporting and Data Analysis skills
• Value driven – Urgency, Integrity

Education And Experience

• Basic Security qualifications (S+ or equivalent)
• AWS Solutions Architect - Professional or AWS DevOps - Professional certification
• AWS SysOps Administrator, Developer, or DevOps Engineer Certification
• 10+ Years IT Experience
• 5+ Years’ experience in Information Security across all domains
• 5+ Year’s Cloud platform experience with a focus on security
• 5+ Years’ Experience with APIs and Web services, including REST and SOAP
• 5+ Years’ experience with scripting or programming languages and a desire to automate everything (such as, Java, C++, Python, Ruby)
• Secure System development practices; Least Privilege, Secrets management, Static Code Analysis

Beneficial Qualifications & Experience

• IT related Diploma / Degree
• CISSP
• Experience using automation tools such as Puppet, Terraform, Ancible
• Experience with Kubernetes, SaltStack, Docker, and Kafka.
• Experience integrating applications with SSO providers such as AzureAD
• Secure System development practices; Least Privilege, Secrets management, Static Code Analysis