Cybersecurity Assurance Lead: Pen Testing & Secure DevSecOps

HALA; South Africa; Hybrid; ZAR 300 000 - 400 000; Full time

Job summary

A leading fintech company is seeking a Security Lead to drive offensive security programs, focusing on Penetration Testing and Vulnerability Management. The ideal candidate will collaborate across teams to implement security practices within the organization, ensuring robust security measures for applications, infrastructure, and cloud environments. Responsibilities include managing penetration tests, overseeing vulnerability lifecycles, and integrating security protocols within the development process. Competitive compensation and a supportive, innovative work culture are offered.

Benefits

Competitive compensation packages

Remote and in-office flexibility

Personal development opportunities

Annual learning stipend

Mentoring and autonomy in roles

Qualifications

• Proven experience in Penetration Testing and Red Teaming programs.
• Strong background in Secure Software Development Lifecycle (S-SDLC) and CI/CD integration.
• Experience with cloud security best practices.

Responsibilities

• Develop and execute penetration testing and red teaming exercises.
• Own the vulnerability lifecycle and prioritize remediation based on business risk.
• Provide security assurance on new system designs.

Skills

Penetration testing expertise

DevSecOps integration for security automation

Security architecture design

Threat Modeling

Tools

Vulnerability Management tools (e.g., Qualys, Nessus)

Static/Dynamic Application Security Testing tools

Job description

A leading fintech company is seeking a Security Lead to drive offensive security programs, focusing on Penetration Testing and Vulnerability Management. The ideal candidate will collaborate across teams to implement security practices within the organization, ensuring robust security measures for applications, infrastructure, and cloud environments. Responsibilities include managing penetration tests, overseeing vulnerability lifecycles, and integrating security protocols within the development process. Competitive compensation and a supportive, innovative work culture are offered.