Security System Analyst - Health Systems at Discovery Limited

Key Purpose

• Successful candidates will work closely with our Architects to establish and enforce system access controls; maintaining disaster preparedness.

Areas of responsibility may include but not limited to

• Support directly the area architect on all information security aspects for the area e.g. confidentiality, integrity, and availability.
• Be involved on all projects active in the area and ensure that:
  • Security requirements are defined as part of non-functional requirements and are properly handled as part of the project lifecycle.
  • Security risks are properly identified and logged on the project.
  • Secure coding practices are followed e.g., guidelines are in place, perform peer reviews, automated solution is in place etc.
• Share with the area architect security responsibility for the applications (bespoke or third party) active in the area. Ensure that:
  • Analyse the area architecture (and identify gaps) from security point of view.
    • Design, implement / select and evangelize security solutions for the area.
  • The relevant parties are involved and security gaps are identified for the area.
    • Prepare and maintain active security gaps log register for the area.
  • The area architect, HOD, EA and CIO are aware of the gaps.
  • Relevant security risks are logged for each of the gaps.
  • Initiatives are registered for closing the gaps.
    • Drive those initiatives and escalate to the HOD, EA and CIO in case initiatives change (to lower) priority.
• Work closely with the EA team on all security initiatives active in DHS:
  • At times, be directly involved in designing / implementing DHS wide security solutions.
  • Work on defining DHS wide security standards and guidelines.
  • Work actively on improving the security awareness within DHS.
• Drive (within the area as well as with clients and service providers for the area) the implementation of the service security framework, mobile security guidelines, web security guidelines etc.
• Be involved in all other security implementations for DHS and tailor them appropriately for the area.

Personal Attributes And Skills

• Self-driven and self-disciplined individual.
• Energetic and willing to take initiative.
• Be able to research, solve problems and in general work without supervision.
• Team player!
• Trustworthy.
• Excellent Java, JEE, Spring, Hibernate and MOM skills.
• Java SE and EE security architecture.
• Must have general software security understanding e.g. roles of DMZ, firewalls, security in depth etc.
• DevOps understanding is necessary.
• WebLogic and SpringBoot are highly desirable.
• Oracle DB understanding is highly desirable.
• PKI, OAuth and OpenID understanding is highly desirable.
• Understanding of Kerberos and / or SAML is desirable
• Understanding of network infrastructure and protocols is highly desirable.

Education AND Work Experience

• Bachelor Degree in Computer Science, Information Technology, Software Engineering or related field.
• 7 - 10 years’ experience of Java development. - Essential
• Minimum of 3 years’ experience of Application Security - Advantageous