Information Security Specialist (Penetration Testing)

Placements24; Sandton; On-site; ZAR 420,000 - 640,000; Full time

Benefits offered by this job

Competitive contract rates

Professional development opportunities

Diverse, challenging security projects

Security-focused organisation

Job summary

Placements24 is seeking an Information Security Specialist with a penetration testing focus in Sandton, Gauteng. The role involves hands-on testing, vulnerability assessments, and security audits to identify weaknesses and guide remediation.

You will work with IT and development teams to embed secure practices and stay ahead of evolving threats. Certifications like CEH/OSCP/GPEN are highly desirable.

Qualifications

• Proven experience as a Penetration Tester or Security Analyst with an offensive security focus.
• Experience with common pentest tools, reporting, and remediation guidance.
• Strong written and verbal communication skills.

Responsibilities

• Plan, scope, and execute penetration tests on web apps, networks, and systems.
• Perform vulnerability assessments using various tools and methodologies.
• Analyze test results and document findings clearly with actionable remediation steps.
• Provide detailed reports with remediation guidance.

Skills

Penetration testing

Offensive security

Analytical thinking

Strong communication

Education

CEH

OSCP

GPEN

Tools

Metasploit

Burp Suite

Nmap

Nessus

Job description

About the Role

Our client is seeking a skilled Information Security Specialist with expertise in Penetration Testing to join their dedicated security team. This role, based in Sandton, Gauteng , requires a proactive and methodical approach to identifying vulnerabilities within our client's systems and applications. You will conduct comprehensive penetration tests, vulnerability assessments, and security audits to uncover potential security weaknesses. Your findings will be crucial in guiding remediation efforts and strengthening the overall security posture of the organisation. This is a hands-on role for a security enthusiast who enjoys the challenge of 'thinking like an attacker' and providing actionable recommendations. You will work closely with IT and development teams to ensure security is a fundamental aspect of our client's technology landscape.

Key Responsibilities

• Plan, scope, and execute penetration tests on web applications, networks, and systems.
• Perform vulnerability assessments using various tools and methodologies.
• Analyze test results, identify exploitable vulnerabilities, and document findings clearly.
• Provide detailed reports with actionable recommendations for remediation.
• Stay up-to-date with the latest penetration testing techniques, tools, and threat vectors.
• Collaborate with development and IT teams to ensure vulnerabilities are addressed effectively.
• Participate in security reviews and provide input on secure coding practices.
• Maintain a knowledge base of common vulnerabilities and attack patterns.

Requirements

• Proven experience as a Penetration Tester or Security Analyst with a focus on offensive security.
• Proficiency with penetration testing tools such as Metasploit, Burp Suite, Nmap, and Nessus.
• Strong understanding of web application security, network protocols, and operating system security.
• Experience in vulnerability assessment and reporting.
• Excellent analytical and problem-solving skills.
• Strong written and verbal communication skills.
• Relevant certifications such as CEH, OSCP, or GPEN are highly desirable.
• Ability to work independently and as part of a team in a project-based environment.

Benefits

• Opportunity to work on diverse and challenging security projects.
• Competitive contract rates.
• Exposure to a wide range of technologies and security environments.
• Professional development and training opportunities.
• Work within a dynamic and security-focused organisation.