Junior Penetration Tester (JHB)

eCOGRA Holding; Johannesburg; On-site; ZAR 240,000 - 360,000; Full time

Job summary

eCOGRA Holding in Johannesburg seeks a motivated Junior Penetration Tester to apply cybersecurity knowledge in real-world assessments, gaining hands-on experience under senior team guidance.

You will assist with testing across web apps, APIs, and networks, document findings, and help with remediation recommendations while expanding skills through practical labs and client collaborations.

Qualifications

• 1+ year of practical cybersecurity experience in penetration testing, vulnerability assessment, or application security.
• Relevant certification such as eJPT, PNPT, CPTS, CEH, Security+ or equivalent.

Responsibilities

• Assist with vulnerability assessments and penetration testing across web apps, APIs, networks, and other systems.
• Identify, manually validate, and document security vulnerabilities, false positives, and potential risks.
• Use penetration testing tools and ethical hacking techniques to support security assessments.
• Prepare technical findings and recommend remediation measures.
• Stay updated on cybersecurity threats, vulnerabilities, industry best practices, and regulatory requirements.
• Collaborate with clients and internal teams, and develop technical skills under the guidance of senior testers.

Skills

Penetration testing

Vulnerability assessment

Networking knowledge

Linux

Windows

Python scripting

Bash

PowerShell

Analytical thinking

Documentation

Communication

Tools

Burp Suite

Nmap

Nessus/Tenable

Metasploit

Wireshark

Job description

eCOGRA is looking for a motivated and technically curious Junior Penetration Tester to join our team. This is an opportunity to apply your cybersecurity knowledge in a practical environment, gain exposure to real-world vulnerability assessments and penetration testing engagements, and develop your skills under the guidance of experienced professionals.

You will assist with identifying and validating security vulnerabilities across web applications, APIs, networks, and other technology environments, while contributing to the delivery of high-quality security assessments for our clients.

Key Responsibilities:

• Assist with vulnerability assessments and penetration testing across web applications, APIs, networks, and other systems.
• Identify, manually validate, and document security vulnerabilities, false positives, and potential risks.
• Use penetration testing tools and ethical hacking techniques to support security assessments.
• Prepare technical findings and recommend remediation measures.
• Stay updated on cybersecurity threats, vulnerabilities, industry best practices, and regulatory requirements.
• Participate in practical security labs, collaborate with clients and internal teams, and develop technical skills under the guidance of senior testers.

Minimum Requirements:

• At least 1 year of practical cybersecurity experience, preferably in penetration testing, vulnerability assessment, or application security.
• A relevant certification such as eJPT, PNPT, CPTS, CEH, Security+, or equivalent.
• Good knowledge of networking (TCP/IP, HTTP/HTTPS, DNS), Linux, and Windows.
• Familiarity with tools such as Burp Suite, Nmap, Nessus/Tenable, Metasploit, or Wireshark.
• Basic scripting skills in Python, Bash, PowerShell, or similar.
• Strong analytical, documentation, and communication skills.

Advantageous: Practical experience with Hack The Box, TryHackMe, PortSwigger Academy, CTF challenges, bug bounty programmes, or personal cybersecurity projects.