IT Security Specialist at Datafin Recruitment

ENVIRONMENT:

IF you are passionate about Internet security and enjoy the challenge of finding robust solutions to complex problems, your technical expertise as an IT Security Specialist is sought after by a fast-paced, innovative investment firm. By joining its Red Team, you will support ongoing assessments of technologies used within the company using various TTPs (Tools, Techniques and Procedures) to ensure they are secure. The ideal candidate will preferably need a degree in computer science or an equivalent field and relevant certifications like security testing. You should have at least 4 years of software security experience, at least 3 years of proficiency in at least 1 scripting programming language and familiarity with Java and Python, storage experience and implementing security controls. security techniques, Full-Stack software architectures (Linux/Unix) from UI to infrastructure, CI/CD and the ability to take a long-term view of the security posture to proactively remediate architectural deficiencies.

FUNCTIONS:

  • Contribute to the design, implementation and execution of security review and testing methodologies for testing services.
  • Ensure risk remediation by partnering with service teams.
  • Perform continuous security review across the domain through penetration testing and red teaming on production systems.
  • Analyze and execute real attack scenarios to test and measure detection capability and at the same time determine detection thresholds, quiet to loud.
  • Work with corporate development teams to create comprehensive security tools and large-scale functional enhancements.
  • Assist with incident response if and when prompted and validate that detection and prevention technology approaches work on the latest threats.
  • Be a mentor to other team members.

CONDITIONS:

Skills –

  • A bachelor’s degree in computer science or a similar field or equivalent work experience is desirable.
  • Qualifications relevant to the role, i.e., security testing.

Experience/Skills –

  • More than 4 years of experience in software security.
  • 3+ years of proficiency in at least 1 scripting programming language, familiarity with Java and Python.
  • Passionate about Internet security issues and the threat landscape for popular software and services.
  • With the design and implementation of technical security controls.
  • Perform or support red team engagements with an understanding of holistic assessment.
  • Full-Stack software architectures (Linux / Unix) from user interface to infrastructure.
  • Common serverless architectures and virtualization techniques (hypervisors/containers/jails) and leaks/exploits of these environments.
  • Experience with micro-services, API-based agents, or service-oriented software architectures.
  • Operations experience with CI/CD development or managing distributed systems.
  • Experience evaluating web services with authentication controls, session management, access controls, logic flaws, injection vulnerabilities, request smuggling, cloud privilege escalation, DOS attacks.

ATTRIBUTES:

  • Good oral and written communication skills.

Although we would really like to respond to every application, if you are not contacted for this position within 10 working days, please consider your application unsuccessful.

COMMENTS:

When applying for a job, make sure you meet the minimum job requirements. OnlySouth African citizens will be considered for this role. If you are not at the stated location of any of the jobs, please note your relocation plans in all job applications and correspondence. Please email a word copy of your CV to [Email Address Removed] and mention the reference numbers of the works. We have a job listing on [URL Removed] Datafin IT Recruitment – Jobs in Cape Town.

Desired skills:

Find out more/Apply to this position

Comments are closed.