Senior Penetration Tester

Placements24; United States; Hybrid; USD 120,000 - 190,000; Full time

Benefits offered by this job

Performance-based bonuses

Profit sharing

Medical aid

Retirement fund contributions

Life assurance

Professional development opportunities

Conference attendance

Job summary

Placements24 is seeking a highly skilled Senior Penetration Tester to join a leading cybersecurity consultancy. You will plan, execute, and report on penetration tests across web applications, networks, APIs, and cloud environments.

The role emphasizes proactive defense, ethical practice, and actionable client guidance. Ideal candidates bring 5+ years in penetration testing, experience with AWS/Azure/GCP, and proficiency in Metasploit, Burp Suite, Nmap, and Nessus.

Qualifications

• Bachelor's degree in CS/Cybersecurity or related field, or equivalent demonstrable experience.
• Minimum 5 years of penetration testing and ethical hacking.
• Proven experience testing web apps, networks, and cloud platforms (AWS/Azure/GCP).
• Proficiency with Metasploit, Burp Suite, Nmap, Nessus and related tools.
• Strong understanding of OWASP Top 10 and exploitation techniques.
• Scripting experience (Python, Bash) for tooling and automation.
• Excellent written and verbal communication skills.
• Certifications such as OSCP/CEH/GPEN/GWAPT are highly desirable.

Responsibilities

• Plan and execute penetration tests on web apps, networks, APIs, and cloud environments.
• Identify vulnerabilities, exploit weaknesses, and assess business impact.
• Use a range of manual and automated testing tools and techniques.
• Conduct thorough reconnaissance to understand target environments.
• Develop detailed, accurate penetration test reports with remediation guidance.
• Present findings to clients clearly and concisely.
• Stay current with testing methodologies, tools, and exploit techniques.
• Collaborate with client teams to discuss findings and assist with remediation.
• Contribute to development of new testing methodologies and services.
• Maintain ethical conduct and confidentiality throughout engagements.

Skills

Analytical thinking

Communication skills

Independent worker

Education

Bachelor's degree in Computer Science/Cybersecurity or related field

Tools

Metasploit

Burp Suite

Nmap

Nessus

Job description

About the Role

Our client, a rapidly expanding cybersecurity consultancy, is seeking a highly skilled and ethical Senior Penetration Tester to join their elite offensive security team. This role is integral to helping clients identify and understand their vulnerabilities through rigorous simulated attacks. You will be responsible for planning, executing, and reporting on penetration tests across various environments, including web applications, networks, and cloud infrastructure. The ideal candidate is a creative and tenacious security professional with a deep understanding of exploitation techniques and a passion for proactive defense. Located in the picturesque town of Paarl, Western Cape , this position offers a hybrid work arrangement, allowing for a balance of on-site collaboration and remote flexibility. You will work with a diverse client base, tackling complex security challenges and providing actionable insights to improve their security posture. We are looking for an individual who thrives in a challenging environment and is dedicated to pushing the boundaries of offensive security.

Key Responsibilities

• Plan and execute comprehensive penetration tests on web applications, network infrastructures, APIs, and cloud environments.
• Identify vulnerabilities, exploit weaknesses, and assess the potential business impact.
• Utilize a wide range of penetration testing tools and techniques, both manual and automated.
• Conduct thorough reconnaissance and information gathering to understand target environments.
• Develop detailed and accurate penetration test reports, clearly communicating findings and remediation recommendations.
• Present findings and recommendations to clients in a clear and concise manner.
• Stay up-to-date with the latest penetration testing methodologies, tools, and exploit techniques.
• Collaborate with clients' technical teams to discuss findings and assist with remediation efforts.
• Contribute to the development of new testing methodologies and services.
• Maintain ethical conduct and confidentiality throughout all engagements.

Requirements

• Bachelor's degree in Computer Science, Cybersecurity, or a related field, or equivalent demonstrable experience.
• Minimum of 5 years of experience specifically in penetration testing and ethical hacking.
• Proven experience testing web applications, network infrastructure, and cloud platforms (AWS, Azure, GCP).
• Proficiency with various penetration testing tools such as Metasploit, Burp Suite, Nmap, Nessus, etc.
• Strong understanding of common vulnerabilities (e.g., OWASP Top 10) and exploitation techniques.
• Experience with scripting languages (e.g., Python, Bash) for tool customization and automation.
• Excellent analytical, problem-solving, and critical thinking skills.
• Strong written and verbal communication skills, with the ability to document complex technical findings.
• Relevant certifications such as OSCP, CEH, GPEN, or GWAPT are highly desirable.
• Ability to work independently and as part of a collaborative team.

Benefits

• Our client offers a competitive salary commensurate with experience, complemented by performance-based bonuses and potential for profit sharing.
• A comprehensive benefits package includes medical aid, retirement fund contributions, and life assurance.
• Significant opportunities for professional development are available, including advanced training, certifications, and attendance at leading cybersecurity conferences.
• The company fosters a dynamic and collaborative work environment where innovation and skill development are highly valued.
• Generous annual leave and personal time off are provided.
• This role offers the chance to work on exciting and challenging projects for a diverse client base, hone your offensive security skills, and contribute to a growing and reputable cybersecurity firm.
• Regular team-building events and knowledge-sharing sessions enhance team cohesion and professional growth.