Information Security Analyst (Penetration Testing)

Placements24; Soweto; On-site; ZAR 450,000 - 650,000; Full time

Benefits offered by this job

Medical aid

Retirement fund

Life insurance

Job summary

Placements24 is seeking a highly skilled Information Security Analyst focused on penetration testing to join our security team in Soweto. The role involves proactive vulnerability identification in systems, networks, and applications, followed by actionable remediation guidance.

The ideal candidate has 3–5 years in penetration testing or security analysis, with proficiency in Metasploit, Burp Suite, Nmap, and Wireshark, and holds relevant certifications such as CEH, OSCP, or GPEN.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related discipline.
• 3–5 years of experience in penetration testing, vulnerability assessment, or security analysis.
• Proficiency with industry-standard penetration testing tools such as Metasploit, Burp Suite, Nmap, and Wireshark.
• Certifications such as CEH, OSCP, or GPEN are highly desirable.

Responsibilities

• Plan, execute, and document comprehensive penetration tests and vulnerability assessments on web applications, networks, and infrastructure.
• Utilize a variety of ethical hacking tools and techniques to identify security weaknesses and potential attack vectors.
• Analyze test results, identify root causes of vulnerabilities, and provide clear, prioritized recommendations for remediation.
• Collaborate with development and IT operations teams to ensure identified vulnerabilities are addressed effectively and in a timely manner.
• Stay up-to-date with the latest security threats, vulnerabilities, and penetration testing methodologies.
• Develop and maintain scripts and tools to automate security testing processes where possible.

Skills

Penetration testing

Security analysis

Education

Bachelor's degree in CS/IT/Cybersecurity or related field

Tools

Metasploit

Burp Suite

Nmap

Wireshark

Job description

About the Role

Our client is seeking a highly skilled and motivated Information Security Analyst with a focus on penetration testing to join their security team in Soweto . This role is crucial for proactively identifying vulnerabilities in the organization's systems, networks, and applications before malicious actors can exploit them. You will conduct rigorous security tests, analyze findings, and provide actionable recommendations to strengthen defenses. This is a fantastic opportunity for a security professional with a passion for ethical hacking to contribute directly to the company's defensive capabilities and safeguard critical assets within a collaborative and growth-oriented environment.

Key Responsibilities

• Plan, execute, and document comprehensive penetration tests and vulnerability assessments on web applications, networks, and infrastructure.
• Utilize a variety of ethical hacking tools and techniques to identify security weaknesses and potential attack vectors.
• Analyze test results, identify root causes of vulnerabilities, and provide clear, prioritized recommendations for remediation.
• Collaborate with development and IT operations teams to ensure identified vulnerabilities are addressed effectively and in a timely manner.
• Stay up-to-date with the latest security threats, vulnerabilities, and penetration testing methodologies.
• Develop and maintain scripts and tools to automate security testing processes where possible.

Requirements

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related discipline.
• 3-5 years of experience in penetration testing , vulnerability assessment, or security analysis.
• Proficiency with industry-standard penetration testing tools such as Metasploit, Burp Suite, Nmap, and Wireshark.
• Strong understanding of network protocols, operating systems, web application security, and common exploitation techniques.
• Relevant certifications such as CEH, OSCP, or GPEN are highly desirable.

Benefits

• Competitive salary commensurate with experience and qualifications.
• A comprehensive benefits package including medical aid, retirement fund, and life insurance.
• Opportunities for professional development, advanced training, and attending industry conferences.
• A supportive work environment that encourages continuous learning and skill enhancement in cybersecurity.
• The chance to work on exciting security challenges and contribute to protecting valuable digital assets.