Code-Review Pentester (Intermediate)

Redherd.Io; Cape Town; On-site; ZAR 900,000 - 1,200,000; Full time

Job summary

RedHerd is seeking an Intermediate Pentester with a focus on code review for client engagements in South Africa. You will read unfamiliar code, trace change histories, and identify logic flaws with real-world impact.

This hands-on role requires offensive security experience and strong code-reading ability. Based in Cape Town or Johannesburg, you will collaborate with client engineers, explain findings clearly, and mentor junior reviewers.

Qualifications

• Three to four years in security with real time spent in penetration testing or offensive security.
• Hands-on source code review experience.
• Ability to read and reason about source code in a compiled or JVM language.
• Comfort in Git-based repositories.
• Demonstrated offensive ability.
• Strong written English and report-writing skill.
• South African work authorisation.

Responsibilities

• Review source code for security defects across unfamiliar client codebases.
• Follow commit histories and code diffs to understand how a vulnerability was introduced, and whether a fix actually closed it.
• Identify the affected functions, dependencies and logic paths behind a finding.
• Analyse published CVEs and their patches, and look for the same pattern elsewhere in the code.
• Validate findings and demonstrate real impact rather than reporting theoretical risk.
• Carry out penetration testing and security assessment work alongside the review work.
• Produce clear, well-structured written findings that a client engineer can act on.
• Explain a finding and its remediation directly to the client's technical team.
• Get up to speed on an unfamiliar language, framework or codebase at the start of an engagement.
• Support and guide junior reviewers on the same engagement.

Skills

Hands-on source code review

Reading and reasoning about sourceCode

Git proficiency

Offensive security experience

Strong written English

Explain findings to engineers

South African work authorisation

Education

Computer science degree or equivalent

Tools

Static analysis tooling

Code property graphs

Vulnerability research tools

Job description

RedHerd is seeking an Intermediate Pentester with a focus on code review for client engagements in South Africa. You will read unfamiliar code, trace change histories, and identify logic flaws with real-world impact.

This hands-on role requires offensive security experience and strong code-reading ability. Based in Cape Town or Johannesburg, you will collaborate with client engineers, explain findings clearly, and mentor junior reviewers.