About the Role
Our client, WhatJobs Direct , is seeking a highly skilled Information Security Penetration Tester to join their team in Tembisa, Gauteng, ZA. This is a hybrid role, offering a mix of remote flexibility and in-office collaboration, perfect for finding vulnerabilities before malicious actors do. As a Penetration Tester, you will be responsible for simulating cyber attacks on our client's systems, networks, and applications to identify security weaknesses. Your findings will be critical in helping to strengthen our defenses and protect sensitive data. This role requires a deep understanding of attack methodologies, security tools, and ethical hacking techniques. If you are passionate about cybersecurity and enjoy the challenge of finding and exploiting vulnerabilities in a controlled environment, this is an exciting opportunity for you.
Key Responsibilities
- Plan and conduct comprehensive penetration tests on networks, web applications, mobile applications, and infrastructure.
- Utilize a variety of penetration testing tools and techniques to identify security vulnerabilities.
- Perform social engineering assessments to evaluate human vulnerabilities.
- Analyze test results, document findings, and develop detailed reports with actionable recommendations.
- Collaborate with development and security teams to remediate identified vulnerabilities.
- Stay current with the latest penetration testing methodologies, tools, and threat landscapes.
- Assist in developing and refining penetration testing strategies and processes.
- Ensure all testing activities are conducted ethically and within defined scope and rules of engagement.
- Present findings and recommendations to technical teams and management.
- Contribute to the overall security improvement efforts of the organization.
Requirements
- Bachelor's degree in Computer Science, Cybersecurity, or a related field, or equivalent practical experience.
- Proven experience as a Penetration Tester or in a similar ethical hacking role.
- In-depth knowledge of common vulnerabilities (e.g., OWASP Top 10) and attack vectors.
- Proficiency with penetration testing tools such as Metasploit, Burp Suite, Nmap, and Kali Linux.
- Understanding of network protocols, operating systems (Windows, Linux), and web application technologies.
- Experience with scripting languages (e.g., Python, Bash) for automation is a plus.
- Excellent analytical, problem-solving, and report-writing skills.
- Ability to work independently and manage multiple testing engagements.
- Strong ethical conduct and professional integrity.
- Relevant certifications such as OSCP, CEH, GWAPT, or GPEN are highly desirable.
Benefits
- Competitive compensation for contract work.
- Hybrid work arrangement promoting flexibility.
- Access to cutting-edge penetration testing tools and lab environments.
- Opportunity to work on diverse and challenging security projects.
- Continuous learning and skill development opportunities.
- Networking opportunities within the cybersecurity community.
- Flexible working hours.
- Performance-based incentives.
- Professional recognition and growth.
- Supportive team environment.