Information Security Analyst – PenTester

About the role

The Information Governance and Security team at Discovery is looking for a skilled Penetration Tester to perform realistic attack simulations on web, mobile and cloud applications. The role focuses on uncovering vulnerabilities, reporting findings and advising on remediation to protect the organisation’s information assets.

Key responsibilities

• Work with stakeholders to define penetration testing requirements and scope.
• Design, script and execute penetration tests that mimic real‑world attacks.
• Simulate security breaches to assess the resilience of systems and applications.
• Produce detailed reports with risk assessments, recommendations and remediation guidance.
• Present findings and risk implications to technical and business audiences.
• Stay up‑to‑date with emerging attack techniques and threat intelligence.

Required profile

• Relevant degree in Computer Science or Computer Engineering (advantageous).
• Security certifications such as CEH, GPEN, OSCP or CREST.
• 3‑5 years of penetration testing experience, including web, mobile and cloud applications.
• At least 2 years of Red‑team engagement or threat‑analysis experience.
• Strong logical reasoning and ability to work under pressure and tight deadlines.
• Passion for information security and continuous learning of current security trends.

Required skills

• Proficiency with Linux, macOS and Windows operating systems.
• Scripting in Bash, PowerShell and Python.
• Network and wireless penetration testing techniques.
• Ability to read, understand and modify code across multiple programming languages and frameworks.
• Knowledge of cryptographic protocols, cipher suites and secure coding practices.
• Familiarity with penetration testing methodologies, standards and source‑code review processes.
• Basic AI/ML awareness for security use‑cases.