Intermediate Developer - Security at Clicks Group

Job Objectives:

To take ownership of IT security duties and provide day-to-day support to the Information Security Officer, including:

•         Administer and maintain operational security solutions and processes towards continuous improvement of the overall IT security posture
•         Automate repetitive workflows with scripts and toolsets
•         Research, develop, and recommend information security policies, procedures, standards, and safeguards to protect sensitive data and enable secure data transmission and storage
•         Document and implement security hardening baselines for internal and external IT systems and compliance monitoring
•         Administer and manage identity access governance toolset, and initiate and follow up on user access certification review campaigns
•         Monitor SIEM alerts, investigate and resolve incidents / threat intelligence towards closure
•         Collaborate with other teams to security solutions with backend applications and systems
•         Identify, investigate and resolve threat intelligence, security, access and authentication issues escalated by staff and other users
•         Keep abreast of and share details of new and on-going information security issues, threats, remediation/mitigation steps and latest technologies
•         Document technical issues identified during security assessments and practical recommendations for resolution. Proactively identify and mitigate against information security risks or incidents
•         Drive awareness of vendors / 3rd parties compliance requirements to information security standards, and ensure adherence thereof
•         Generate regular IT security reports structured to provide information about statistics and trends as required by the Information Security Officer
•         Implement IT security projects, deploy new security tools using DevOps approach to achieve tasks and objectives, and conduct research work as needed
•         Maintain PCI DSS and audit compliance requirements
•         Share workload with IT Security analysts to meet call SLA requirements, and automate manual IT security workflows where appropriate

Qualifications:

•         Relevant degree, certification or IT studies (CISSP, OSCP, CEH, Security+, Linux)
•         Demonstrable Linux and scripting/programming experience

Skills, Abilities and Job Related Knowledge:

•   4 years demonstrable general IT experience with at least 2 years thereof in development
•         Basic understanding of information security principles
•         Working knowledge of heterogeneous operating system platforms
•         Proficient in at least one programming or scripting language (Linux shell scripting, Windows Powershell scripting, Python, Perl, Java, etc.)

Competencies:

•    Analysing
•    Planning and Organising
•    Delivering Results and Meeting Customer Expectations
•    Deciding and Initiating Action
•    Learning and Researching