Lead Penetration Tester

Placements24; Centurion; Hybrid; ZAR 900,000 - 1,500,000; Full time

Benefits offered by this job

Salary package

Medical aid

Retirement annuity

Annual leave

Training & conferences

Hybrid work model

Career advancement

Job summary

Placements24 is seeking a Lead Penetration Tester to join our client's growing security team in Centurion, Gauteng. The role focuses on leading offensive security engagements across web apps, APIs, mobile apps, networks, and cloud environments within a hybrid work setup.

You will mentor junior testers, develop testing methodologies, and communicate findings to stakeholders to strengthen defenses.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or related field.
• Minimum 6 years of experience in penetration testing and offensive security.
• Experience in web app, network, and cloud penetration testing; strong report writing and stakeholder communication.

Responsibilities

• Lead and execute penetration tests across web apps, APIs, mobile apps, and networks.
• Develop and refine testing methodologies, tools, and techniques.
• Mentor a team of penetration testers, providing guidance and oversight.
• Analyze vulnerabilities and provide actionable remediation recommendations.
• Prepare detailed technical reports documenting findings, methodologies and risk assessments.
• Present findings to technical teams, management and clients.

Skills

Communication

Leadership

Education

Bachelor's degree in Computer Science or Cybersecurity

OSCP/OSCE/CEH/GPEN certifications

Tools

Burp Suite

Metasploit

Nmap

Kali Linux

Job description

About the Role

Our client, a fast-growing tech startup renowned for its innovative software solutions, is actively seeking a Lead Penetration Tester to join their expanding security team. This role is situated in the vibrant tech district of Centurion, Gauteng , and offers a flexible hybrid working model. As the Lead Penetration Tester, you will spearhead offensive security initiatives, identifying and exploiting vulnerabilities in web applications, networks, and cloud environments. You will guide junior testers, develop sophisticated testing methodologies, and communicate findings to technical and executive stakeholders. This is a crucial position for an individual passionate about ethical hacking and proactive threat detection, aiming to fortify our client's digital defenses. The opportunity to shape the security posture of a cutting-edge company makes this a highly attractive role for experienced security professionals.

Key Responsibilities

• Lead and execute comprehensive penetration tests against web applications, APIs, mobile applications, and network infrastructure.
• Develop and refine penetration testing methodologies, tools, and techniques.
• Manage and mentor a team of penetration testers, providing guidance and technical oversight.
• Conduct in-depth analysis of vulnerabilities and provide actionable remediation recommendations.
• Prepare detailed technical reports documenting test findings, methodologies, and risk assessments.
• Present findings and recommendations to technical teams, management, and clients.
• Collaborate with development and operations teams to integrate security into the SDLC.
• Research and stay updated on the latest attack vectors, exploits, and security trends.
• Contribute to the development of security policies and procedures.
• Maintain and manage penetration testing tools and infrastructure.

Requirements

• Bachelor's degree in Computer Science, Cybersecurity, or a related field; relevant certifications are highly valued.
• Minimum of 6 years of experience in penetration testing and offensive security.
• Demonstrated expertise in web application penetration testing, network penetration testing, and vulnerability assessment.
• Proficiency with penetration testing tools such as Burp Suite, Metasploit, Nmap, and Kali Linux.
• Experience with scripting languages (e.g., Python, Bash) for automation is essential.
• Strong understanding of networking protocols, operating systems, and common vulnerabilities (e.g., OWASP Top 10).
• Experience leading technical teams or projects.
• Excellent written and verbal communication skills, including the ability to present technical information clearly.
• Ability to work independently and collaboratively in a Centurion, Gauteng based hybrid environment.
• Relevant certifications like OSCP, OSCE, CEH, or GPEN are strongly preferred.

Benefits

• Our client offers an attractive salary package, performance bonuses, and a comprehensive benefits suite including medical aid, a retirement annuity, and generous annual leave.
• Employees benefit from a culture that promotes continuous learning, with paid training, conference attendance, and certification support.
• The hybrid work model offers excellent work-life balance.
• Opportunities for career advancement into management or specialized technical roles are abundant.
• The Centurion, Gauteng location provides easy access to amenities and transport links.