Application Security Penetration Tester | Hybrid in Pretoria

Placements24; Pretoria; Hybrid; ZAR 482,000 - 827,000; Full time

Benefits offered by this job

Competitive contractor rates

Hybrid work arrangement

Professional growth

Access to security tools

Networking opportunities

Job summary

Placements24 is seeking a Penetration Tester with a strong focus on Application Security in Pretoria, Gauteng. The role spans testing web, mobile, and API endpoints, using Burp Suite, OWASP ZAP, and Metasploit, with reporting and remediation guidance for clients.

You will work across a team of security professionals, contributing to practical security improvements, code reviews, and continuous learning in a hybrid office/remote setup.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or related field, or equivalent practical experience.
• Minimum of 4 years of penetration testing experience with focus on application security.
• Experience testing web applications, mobile applications (iOS/Android), and RESTful APIs.
• Proficiency with common penetration testing tools and frameworks.
• Strong understanding of common web vulnerabilities (XSS, SQL Injection, CSRF) and their exploitation.
• Knowledge of secure coding practices and application security principles.
• Experience with programming or scripting languages (Python, JavaScript, Bash).
• Excellent written and verbal communication for reporting and client interaction.
• Relevant certifications such as GWAPT, GPEN, OSCP, or CEH are desirable.
• Ability to work effectively both independently and as part of a team.

Responsibilities

• Conduct penetration tests on web applications, mobile applications, and APIs.
• Identify security vulnerabilities, including OWASP Top 10 issues.
• Utilize penetration testing tools and techniques (e.g., Burp Suite, OWASP ZAP, Metasploit).
• Perform security code reviews to identify potential flaws in application logic and implementation.
• Document findings in detailed, professional reports, including risk assessment and remediation recommendations.
• Collaborate with client development teams to explain vulnerabilities and guide remediation efforts.
• Stay up-to-date with the latest application security threats, trends, and testing methodologies.
• Develop and maintain testing methodologies and playbooks.
• Participate in red team exercises and adversarial simulations.
• Contribute to the development of new service offerings in application security.

Skills

Penetration testing

Application security

Python

JavaScript

Education

Bachelor's degree in Computer Science, Cybersecurity, or related field

Tools

Burp Suite

OWASP ZAP

Metasploit

Job description

Placements24 is seeking a Penetration Tester with a strong focus on Application Security in Pretoria, Gauteng. The role spans testing web, mobile, and API endpoints, using Burp Suite, OWASP ZAP, and Metasploit, with reporting and remediation guidance for clients.

You will work across a team of security professionals, contributing to practical security improvements, code reviews, and continuous learning in a hybrid office/remote setup.