Jobs at Discovery Limited

About the role

• As a Senior DevSecOps Engineer, you will be responsible for integrating security into the development, deployment, and maintenance of our software products, ensuring the highest standards of security and reliability.

Key Outputs / Job Responsibilities may include but are not limited to:

• Develop and implement security solutions throughout the software development lifecycle, from design to deployment and maintenance, using methodologies such as STRIDE, DREAD, CVSS, and the OWASP ASVS.
• Work closely with developers, IT operations, and security governance and operations teams to ensure security is integrated into all aspects of the development pipeline.
• Automate security processes and tools to enable continuous integration, continuous delivery, and continuous monitoring (CI/CD/CM) of applications and infrastructure.
• Develop and implement metrics, reporting, and monitoring processes to track the effectiveness of DevSecOps practices, using tools like Dynatrace, ELK, Splunk, AWS CloudWatch and Sonatype Examples of metrics include vulnerability remediation times, security incidents, and code review coverage.
• Establish a governance, review, and continuous improvement process for DevSecOps practices, ensuring alignment with organizational goals and industry best practices.
• Perform risk assessments and threat modelling to identify potential vulnerabilities and provide recommendations for mitigation strategies.
• Develop and enforce security policies and guidelines for application and infrastructure development, based on industry best practices and standards such as OWASP Top Ten, CWE/SANS Top 25, NIST SP 800-53, and OWASP ASVS.
• Train and mentor developers in secure coding practices, emphasizing areas such as input validation, output encoding, and least privilege principles, as well as conducting regular security awareness sessions.
• Conduct regular security audits, vulnerability assessments, and penetration tests to identify and remediate potential threats.
• Stay current with industry trends, emerging threats, and best practices in DevSecOps to continuously improve our security posture.
• Develop and maintain documentation related to security practices, policies, and procedures.

Work Experience

• 3-5 years of relevant Cloud Engineer experience

Education / Qualifications / Accreditations with Professional Body

• Bachelor's degree in Computer Science, Engineering, Information Systems, or a related field.

Preferred (would be advantageous)

• Relevant certifications such as CISSP, CEH, or OSCP are a plus.
• AWS Cloud Engineer/Practitioner certification

Technical Skills or Knowledge

• Strong understanding of software development processes, CI/CD principles, and Agile methodologies.
• Expertise in various security frameworks, tools, and technologies such as OWASP, SAST, DAST, IAST, RASP, and familiarity with toolsets such as SonarQube, Veracode, Checkmarx, and Fortify.
• Proficient in scripting languages such as Python, Ruby, or Shell.
• Experience with containerization and orchestration technologies, such as Docker and Kubernetes.
• Familiarity with cloud platforms (AWS, Azure, GCP) and their respective security services and tools.
• Knowledge of networking protocols, firewalls, intrusion detection systems, and encryption technologies.
• Strong analytical, problem-solving, and communication skills. Software Development: This includes proficiency in programming languages such as Python, Java, JavaScript, or C#, as well as familiarity with software development methodologies like Agile or DevOps.
• Security Knowledge: They should be familiar with security frameworks such as OWASP (Open Web Application Security Project) and have experience in implementing security controls and practices within software development processes.
• DevOps Practices: This includes experience with continuous integration and continuous deployment (CI/CD) pipelines, configuration management tools like Ansible or Chef, containerization technologies such as Docker or Kubernetes, and infrastructure-as-code (IaC) tools like Terraform or CloudFormation.
• Security Tools and Technologies: This may include vulnerability scanning tools like Nessus or Qualys, security testing frameworks such as Burp Suite or ZAP, security information and event management (SIEM) tools like Splunk or ELK stack, and other relevant security tools.
• Cloud Computing: Experience with cloud security best practices, configuring and securing cloud resources, and managing cloud-based deployments is highly valuable.

go to method of application »

Key Purpose

The Senior Sales Manager will take accountability and lead various Funeral Sales teams. This individual will be required to develop strategies, examine growth opportunities, and enable sales improvement, taking responsibility for the department’s performance against set targets.

Areas of responsibility may include but not limited to:

• Lead and manage Funeral sales teams consisting of Sales Managers  and financial advisors.
• Achievement of sales and quality targets.
• Ensuring a professional level of interactions with intermediaries and HR contacts.
• Inductions and leads management, ensuring that campaigns and leads are correctly managed
• Ongoing liaison and relationship building with various stakeholders.
• Analyze Management Information System Reporting, create and maintain well crated reports to identify opportunities and gaps
• Uphold Business processes and identify operational improvements
• Promote a positive and proactive approach to compliance and risk,
• Ability to proactively manage change.
• To work as a team player within a team environment, participating willingly and providing support and guidance to colleagues at all times
• Compliance and risk management and adherence, coach staff to improve performance and behaviors.
• Create an energetic and fun work environment

Responsibilities may include but not limited to

• Responsible for management and oversight of the FSPs activities relating to rendering of financial services, which includes advice and/or intermediary services.
• Must monitor that the statutory obligation of the FSP is complied with.
• Must comply with the fit and proper requirements (COB, RE, Qualification, PST and CPD).
• Ensure that representatives are compliant with the fit and proper requirements.
• Representatives and Sales Managers complete all required training for their role.
• Review the advice rendered by the representative.
• Monitor on an ongoing basis that the representatives are treating customers fairly.
• Monitor representatives under supervision: (should this not:  Ensure representatives under supervision are being monitored by the Sales Manager)
• To ensure that all the required fit and proper requirements are complied with (Qualification and PST),
• Where monitoring of representatives under supervision is delegated, the following should be done:
• Record the process of delegation and the reporting frequency monitoring done.
• Instil a culture of treating customers fairly in all aspects of the business.
• Ensure that there are business processes and operational ability.

Competencies

• Ability to engage Union representatives.
• Logical, analytical problem-solving ability.
• Excellent interpersonal skills.
• Excellent verbal and written communication skills.
• Ability to work independently.
• Ability to take accountability, responsibility and ownership.
• Able to take initiative and exercise sound judgment and decision making.
• Ability to work in a highly pressurized, target oriented environment.
• Ability to deal positively with change and uncertainty.
• Strong business acumen.
• Strong sales and persuasive skills.
• Strong quality orientation.
• Good organisational skills.
• Proactive, self-motivated.
• Able to identify, nurture and develop talent.
• Customer oriented.
• Ability to meet deadlines timeously

Qualification and Skills

• Matric (Grade 12)
• Relevant Tertiary Education required.  Degree/Diploma  (Bcom or Marketing)
• Four – Six years experience managing sales teams in a target driven in/outbound  environment
• Life product experience preferential.  Experiencing managing teams country wide.
• Computer skills: Microsoft word; Excel; Email.
• NQF Level 5 and Regulatory Exams compulsory (RE1 and RE5)