Security Analyst

Yoco was founded in 2015, and has since processed over R100 billion in digital payments for over 400,000 businesses in South Africa. We’re breaking down barriers and unlocking economic opportunities that enable people to thrive.

We have over 330 team members globally, operating across international markets, all with a bias for boldness, and a passion for simple, progressive solutions. We believe in uniting different people to solve hard problems together.

Our mission of making society more equal takes a variety of people, with different backgrounds and points of view, so we can keep building solutions that work for and include everyone.

Yoco is growing, and as we grow we have compelling challenges ahead of us.

About the Security Team

The security team at Yoco sits within our rapidly growing Engineering function and is responsible for the end-to-end Information Security posture of Yoco Technology Group. Working closely with other engineering and product delivery teams you’d ensure that our external, internal systems, apps and APIs are following best practices when it comes to security and continue to remain secure.

About the role

The Security Analyst role is a technical position primarily tasked with ensuring adoption and maintenance of our vulnerability management program and ongoing security posture. It is critical to the long-term success of Yoco in enabling people to make payments across our market segments in a secure manner. Our users trust us with some of their most sensitive information, and Yoco takes customer security as a priority.

Security analysts are responsible for the continuous assessment of our systems, and recommend or provide solutions to address current and future threats relating to our vulnerability exposure. Importantly, this role will engage closely with the teams within our engineering environment and make recommendations on security controls, frameworks, tooling and secure application development.

What you will be doing

1. Helping to develop new features as well as securing existing ones
2. Knowledge of how to defend against offensive security techniques
3. Strong communication and teamwork skills, guiding others in the engineering organisation through security best practices and exercises
4. Working closely with third-party security and auditing firms and helping implement and recommend security controls to the rest of engineering
5. Being responsible for vulnerability management across the Yoco Technology Group
6. Log management of security related events
7. Performing product security reviews on existing and new features being built by Yoco
8. Ensuring identified security risks are remediated in line with internal SLA and industry best practices
9. Assisting with improving the overall information security posture of Yoco Technology Group

About you

1. At least 2 years of full-time information security experience within a technical domain
2. Knowledge of how to defend against offensive security techniques
3. Strong communication and teamwork skills, guiding others in the engineering organisation through security best practices and exercises
4. A keen interest in information security and an understanding of how cyber security related attack vectors can translate to monetary loss
5. Experience with CI/CD tooling & dependency management as it relates to security
6. Hands-on experience in application security or vulnerability management
7. Willingness to learn fast and leverage automation to increase visibility and decrease the resolution time of security vulnerabilities

Motivation

Yoco’s online footprint and supporting technologies are ever-increasing and continuing to grow. We are looking for a self-starter in this space that will work closely with the relevant technical teams on reviewing and improving the end-to-end security posture of our products.

The People We’re Looking For

We’re looking for people who want to grow. Building things that make society more equal is a daunting task. We never stop pushing, we break things to rebuild, and we challenge ourselves and our teammates. We know that it’s just the right kind of meaningful madness for our kind of visionary human.

At Yoco, we love to laugh, cherish each other’s quirks, and be authentic.

We encourage applicants from diverse backgrounds to apply and ask that you please send your application in English and help us reduce unconscious bias by leaving out your picture, age, address, and other unnecessary information in your CV.