Lead Penetration Tester

Placements24; Durban; On-site; ZAR 900,000 - 1,300,000; Full time

Benefits offered by this job

Competitive remuneration

Excellent medical aid

Retirement fund contributions

Continuous training opportunities

Supportive Durban office environment

Professional growth opportunities

Job summary

Placements24 is seeking a Lead Penetration Tester to spearhead offensive security services from our Durban office. You will lead a team of testers, conduct advanced penetration tests across web, network, API, and cloud environments, and present findings to executives.

The ideal candidate has 6+ years in pentesting, strong knowledge of Metasploit, Burp Suite, Nmap, SQLmap, and relevant certifications. On-site role with potential client-site travel, in Durban.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or related technical field or equivalent practical experience.
• Minimum of 6 years hands-on penetration testing and offensive security experience.
• Experience with penetration testing tools and techniques (e.g., Metasploit, Burp Suite, Nmap, SQLmap).
• Scripting or programming experience (e.g., Python, Bash, PowerShell) for tooling and automation.
• Certifications such as OSCP, OSCE, GPEN, or GWAPT are highly preferred.

Responsibilities

• Lead and execute comprehensive penetration testing engagements across web applications, networks, APIs, and cloud environments.
• Develop and refine penetration testing methodologies and tools.
• Mentor and guide junior penetration testers, fostering their technical growth.
• Analyze test results, identify vulnerabilities, and produce detailed, actionable reports for clients.
• Present findings and remediation strategies to technical teams and executive leadership.
• Stay abreast of the latest threat vectors, vulnerabilities, and exploitation techniques.
• Collaborate with clients to understand their security needs and tailor testing approaches accordingly.

Skills

Analytical thinking

Problem solving

Report writing

Team leadership

Scripting knowledge

Education

Bachelor's degree in CS/Cybersecurity or related field

Tools

Metasploit

Burp Suite

Nmap

SQLmap

Job description

About the Role

Our client, a prominent cybersecurity consultancy firm headquartered in Durban, is actively seeking a Lead Penetration Tester to spearhead their offensive security services. This role is critical in identifying vulnerabilities within client systems and providing actionable recommendations for remediation. While this position is primarily based in our Durban office, offering a dynamic on-site team environment, occasional travel to client sites may be required. You will lead a team of talented testers, conduct advanced penetration tests, develop custom testing methodologies, and present findings to executive-level stakeholders. This is an exciting opportunity to work on diverse and challenging engagements across various industries, honing your skills and contributing directly to the security posture of our clients. We pride ourselves on fostering a collaborative and innovative work culture where continuous learning and skill development are paramount. The ideal candidate will possess an insatiable curiosity for breaking systems and a deep understanding of attacker methodologies.

Key Responsibilities

• Lead and execute comprehensive penetration testing engagements across web applications, networks, APIs, and cloud environments.
• Develop and refine penetration testing methodologies and tools.
• Mentor and guide junior penetration testers, fostering their technical growth.
• Analyze test results, identify vulnerabilities, and produce detailed, actionable reports for clients.
• Present findings and remediation strategies to technical teams and executive leadership.
• Stay abreast of the latest threat vectors, vulnerabilities, and exploitation techniques.
• Collaborate with clients to understand their security needs and tailor testing approaches accordingly.

Requirements

• Bachelor's degree in Computer Science, Cybersecurity, or a related technical field, or equivalent practical experience.
• Minimum of 6 years of hands-on experience in penetration testing and offensive security.
• Demonstrated expertise in various penetration testing tools and techniques (e.g., Metasploit, Burp Suite, Nmap, SQLmap).
• Strong understanding of common vulnerabilities (OWASP Top 10, SANS Top 25) and exploitation methods.
• Experience in scripting or programming (e.g., Python, Bash, PowerShell) for tool development and automation.
• Excellent analytical, problem-solving, and report-writing skills.
• Certifications such as OSCP, OSCE, GPEN, or GWAPT are highly preferred.

Benefits

• competitive remuneration package
• excellent medical aid
• retirement fund contributions
• continuous training opportunities
• supportive team environment in our Durban office.
• Opportunities for professional growth and development within a leading cybersecurity firm.