Information Security Specialist at Penta Consulting

Job Location – South Africa - Sandton

Start – ASAP

Duration – 12 Month Contract

Rate – To be Discussed

Job Description

Requirements:

• Develops and manages IT security for multiple IT functional areas (e.g., applications, systems, network and/or Web) across VG.
• Develops and manages security services on Application and Web application
• Performs based vulnerability scanning, virus management and intrusion detection.
• Leads and responds to security incidents and investigations and targets reviews of suspect areas.
• Provides strategic and tactical direction and consultation on information security and compliance.
• Identifies and resolves root causes of security-related problems.
• Possess strong / experienced application development and/or application security background; with solid knowledge of SDLC from design, testing, deployment to post production and the different risk elements associated with each step.
• Consults on teams to resolve issues that are uncovered by various internal and third-party monitoring tools.
• Communicates reporting results and analytical evaluation to information security management.
• Maintains contact with vendors regarding security system updates and technical support of security products
• Works on multiple projects as a team member or technical lead.
• Monitors and analyses information security performance reports and escalates issues as needed.
• Leads and reviews application security risk assessments for new or updated internal or third party applications.
• Evaluates and recommends tools and solutions that provide security functions.
• Determines security violations and inefficiencies by conducting periodic audits.
• Maintains quality service by following organization standards.

Experience:

• 10+ Years IT Experience
• 10+ Years’ experience in Information Security
• 5+ Years direct incident response, cyber security red team / pen tester experience

Knoweledge:

• Cloud Security - IAM, NSG, ASG, ID Federation, VPN’s, IPSec
• Cloud Security - Policies, controls, procedures and technologies
• WAF Implementations
• OWASP top 10 mitigation approaches – Service based environments e.g. REST
• Mastery of Linux/Mac/Windows operating systems
• Network/Wireless Penetration Testing
• Ability to understand and modify code in a diverse range of programming languages and frameworks - OO Programming concepts
• Proficiency in cryptographic protocols and cipher suites
• Thorough understanding of network protocols, data on the wire, and covert channels
• Source code reviews.
• Familiarity with penetration testing methodology and standards
• Deep understanding of Secure SDLC