Lead Penetration Tester

Placements24; Noord-Kaap; Hybrid; ZAR 480,000 - 775,000; Part time

Job summary

Placements24 is seeking a Lead Penetration Tester for a fully remote contract. You will lead tests against client networks, apps, and APIs, crafting complex attack scenarios and delivering actionable remediation guidance.

The role demands 5+ years of experience, proficiency with Metasploit, Burp Suite, Nmap and Wireshark, and the ability to mentor junior testers while communicating findings to executives. Remote work with global clients is offered.

Qualifications

• 5+ years of professional penetration testing experience.
• Expertise with Metasploit, Burp Suite, Nmap and Wireshark.
• Strong understanding of networks, Windows/Linux, web tech and OWASP Top 10.
• Scripting in Python/PowerShell/Bash for tools and automation.
• Excellent reporting and communication abilities.
• Certifications such as OSCP/OSCE/GPEN/GWAPT/CEH are desirable.
• Experience leading security engagements or mentoring juniors.
• Ability to work remotely and manage time independently.
• Bachelor's degree or equivalent practical experience.

Responsibilities

• Lead and conduct in-depth penetration tests across networks, apps, mobile and API.
• Develop and run complex attack scenarios to identify vulnerabilities.
• Use a wide range of testing tools and custom scripts.
• Analyze results, document findings, and provide remediation guidance.
• Prepare detailed testing reports for clients and stakeholders.
• Stay current with exploit techniques and cybersecurity trends.
• Mentor junior testers and provide technical leadership.
• Collaborate with clients to define scope and methodologies.
• Contribute to testing methodologies and tooling improvements.
• Present findings to technical teams and executives.

Skills

Penetration testing

Mentoring

Leadership

Education

Bachelor's degree in Computer Science or Cybersecurity

Tools

Metasploit

Burp Suite

Nmap

Wireshark

Job description

About the Role

Our client, a cybersecurity services firm, is seeking an experienced and highly skilled Lead Penetration Tester to join their elite team. This is a fully remote, contract position, allowing you to work from anywhere. You will be responsible for leading and executing comprehensive penetration tests against client systems, applications, and networks to identify vulnerabilities and simulate real-world cyber-attacks. The ideal candidate possesses a deep technical understanding of offensive security techniques, exceptional problem-solving skills, and a passion for uncovering security weaknesses before malicious actors do. Your expertise will be critical in helping clients strengthen their defenses and protect against sophisticated threats. This role offers the opportunity to work on diverse and challenging projects for a global client base.

Key Responsibilities

• Lead and conduct in-depth penetration tests, including network, web application, mobile, and API testing.
• Develop and execute complex attack scenarios to identify vulnerabilities and assess their impact.
• Utilize a wide range of penetration testing tools and techniques, including custom scripts and exploits.
• Analyze test results, document vulnerabilities, and provide clear, actionable recommendations for remediation.
• Prepare detailed penetration testing reports for clients, effectively communicating findings and risks.
• Stay current with the latest exploit techniques, attack vectors, and cybersecurity trends.
• Mentor and guide junior penetration testers, providing technical leadership and support.
• Collaborate with clients to define scope, objectives, and methodologies for penetration testing engagements.
• Contribute to the development and improvement of penetration testing methodologies and tools.
• Present findings and recommendations to technical teams and executive management.

Requirements

• Proven experience of 5+ years in professional penetration testing and offensive security.
• Demonstrated expertise in various penetration testing methodologies and tools (e.g., Metasploit, Burp Suite, Nmap, Wireshark).
• Strong understanding of network protocols, operating systems (Windows, Linux), web technologies, and common vulnerabilities (e.g., OWASP Top 10).
• Experience with scripting or programming languages (e.g., Python, PowerShell, Bash) for tool development and automation.
• Ability to perform in-depth analysis of vulnerabilities and their potential business impact.
• Excellent report writing and communication skills, with the ability to clearly articulate technical findings.
• Relevant certifications such as OSCP, OSCE, GPEN, GWAPT, or CEH are highly desirable.
• Experience in leading security engagements or mentoring junior staff.
• Ability to work independently and manage time effectively in a remote setting.
• Bachelor's degree in Computer Science, Cybersecurity, or a related field, or equivalent practical experience.

Benefits

This contract role offers a highly competitive daily rate and the flexibility of remote work. You will have the opportunity to work with cutting-edge security technologies and tackle challenging projects for a diverse clientele. This is an excellent opportunity for experienced penetration testers looking for challenging engagements and the freedom of remote work. While the role is remote, the base operational hub is conceptually near Kimberley, Northern Cape . You will be an integral part of a highly skilled and collaborative security team, contributing to significant improvements in client security postures. The contract duration will be project-based with potential for extension.