Information Security Consultant - Penetration Testing

Placements24; Centurion; Hybrid; ZAR 900,000 - 1,400,000; Full time

Benefits offered by this job

Hybrid work model

Training and professional development

Opportunities for contract extensions

Job summary

Placements24 is seeking an Information Security Consultant specializing in penetration testing for a leading cybersecurity firm in Centurion, Gauteng, with a hybrid work model.

Engage in comprehensive security assessments across networks, apps and cloud environments, identify vulnerabilities, and deliver actionable remediation guidance. Requires 4+ years of pen testing experience and strong reporting skills.

Qualifications

• 4+ years of experience in penetration testing and vulnerability assessment.
• Proficient with a wide range of pen testing tools (Metasploit, Burp Suite, Nmap, Wireshark).
• Strong knowledge of networks, OS (Windows/Linux) and web app security (OWASP Top 10).
• Experience scripting (Python, Bash) for automation.

Responsibilities

• Perform comprehensive penetration tests on networks, web/mobile/cloud environments.
• Identify, analyze, and document security vulnerabilities and their impact.
• Develop detailed penetration testing reports with actionable remediation recommendations.
• Conduct social engineering and physical security tests as required.
• Stay updated on latest testing techniques, tools and exploits.

Skills

Penetration testing

Analytical thinking

Communication

Education

Bachelor's degree in Computer Science or Cybersecurity

Tools

Metasploit

Burp Suite

Nmap

Wireshark

Job description

About the Role

Our client, a reputable cybersecurity consulting firm, is seeking a highly skilled and experienced Information Security Consultant specializing in penetration testing. This role involves conducting comprehensive security assessments for a diverse range of clients, identifying vulnerabilities, and providing expert recommendations to enhance their security posture. You will be instrumental in simulating real-world cyber-attacks to uncover weaknesses in systems, networks, and applications. The position is based in our client's office in Centurion, Gauteng , with the flexibility of a hybrid work model. We are looking for a proactive and detail-oriented individual with a passion for offensive security and a proven track record in identifying and exploiting vulnerabilities ethically. This is an exceptional opportunity to work with a variety of industries and technologies, expanding your expertise in the field of cybersecurity.

Key Responsibilities

• Perform comprehensive penetration tests on networks, web applications, mobile applications, and cloud environments.
• Identify, analyze, and document security vulnerabilities and their potential impact.
• Develop detailed penetration testing reports with clear, actionable recommendations for remediation.
• Conduct social engineering assessments and physical security tests as required.
• Research and stay updated on the latest penetration testing techniques, tools, and exploits.
• Collaborate with client IT and security teams to discuss findings and remediation strategies.
• Contribute to the development and refinement of penetration testing methodologies and tools.
• Assist in the development of security awareness training materials based on testing findings.
• Maintain strict confidentiality and ethical standards throughout all engagements.
• Participate in red team exercises to simulate advanced persistent threats.

Requirements

• Bachelor's degree in Computer Science, Cybersecurity, or a related field; or equivalent practical experience.
• Minimum of 4 years of experience in penetration testing and vulnerability assessment.
• Demonstrated proficiency with a wide range of penetration testing tools (e.g., Metasploit, Burp Suite, Nmap, Wireshark).
• Strong understanding of networking protocols, operating systems (Windows, Linux), and web application security principles (OWASP Top 10).
• Experience in scripting languages (e.g., Python, Bash) for automation of tasks.
• Knowledge of cloud security concepts and testing in AWS, Azure, or GCP environments is a plus.
• Excellent written and verbal communication skills, with the ability to present technical findings clearly to various stakeholders.
• Strong problem-solving and analytical capabilities.
• Relevant certifications such as OSCP, CEH, GPEN, or GWAPT are highly desirable.
• Must be eligible to work in South Africa.

Benefits

• Our client offers a competitive contract rate, flexible working hours, and the opportunity to work on challenging and diverse projects for leading organizations.
• As a consultant, you'll gain exposure to a wide array of security landscapes and technologies.
• The Centurion, Gauteng office provides a professional and collaborative environment.
• We support continuous learning through access to training resources and industry conferences.
• Employees benefit from a strong professional network within the cybersecurity community.
• This role provides significant autonomy and the chance to build a strong portfolio of successful client engagements.
• Opportunities for contract extension and future project engagements are common for high performers.
• Our client values work-life balance, even within contract roles.