Lead Penetration Tester - Application Security

Placements24; Cape Town; On-site; ZAR 900,000 - 1,300,000; Full time

Job summary

Placements24 is seeking a Lead Penetration Tester in Cape Town to drive application security for a rapidly growing tech firm. You will lead testing across web, mobile, and APIs and mentor a team of security professionals on advanced methodologies.

The role requires 7+ years in penetration testing, deep knowledge of OWASP Top 10, and hands-on use of Burp Suite, Metasploit, and Kali Linux. On-site in Cape Town.

Qualifications

• 7+ years of penetration testing experience with application security focus.
• Proven expertise in web/mobile/app API security and OWASP Top 10.
• Strong reporting, remediation recommendations, and stakeholder communication.

Responsibilities

• Lead and execute penetration tests on web apps, APIs, and mobile platforms.
• Mentor junior testers and guide security testing methodologies.
• Collaborate with dev teams to embed security into SDLC.
• Document findings with clear remediation guidance and risk ratings.
• Stay updated on emerging threats and testing techniques.

Skills

Penetration testing

Application security

Team leadership

Vulnerability assessment

Strong communication

Education

Bachelor's degree in Computer Science / Cybersecurity

Tools

Burp Suite

Metasploit

Nmap

Kali Linux

Python

Bash

Job description

About the Role

Our client, a rapidly growing technology firm in Cape Town, is seeking an experienced and motivated Lead Penetration Tester to spearhead their application security initiatives. This critical role will involve conducting in-depth security assessments of web applications, mobile apps, and APIs to identify vulnerabilities and ensure the robustness of our client's software products. The successful candidate will lead a team of security professionals, driving the strategy and execution of penetration testing engagements. This is an on-site position based in the vibrant city of Cape Town, Western Cape, allowing for close collaboration with development and security teams. You will be pivotal in maintaining the security integrity of our client's digital offerings.

Key Responsibilities

• Lead and execute comprehensive penetration tests on web applications, APIs, and mobile platforms.
• Identify, assess, and document vulnerabilities, providing detailed remediation recommendations.
• Develop and maintain advanced testing methodologies and tools.
• Mentor and guide junior penetration testers, fostering their technical growth.
• Collaborate with development teams to integrate security into the Software Development Life Cycle (SDLC).
• Perform security code reviews and vulnerability analysis.
• Stay current with emerging threats, vulnerabilities, and penetration testing techniques.
• Communicate findings and recommendations clearly to technical and non-technical stakeholders.
• Contribute to the development of security policies and procedures.

Requirements

• Bachelor's degree in Computer Science, Cybersecurity, or a related field, or equivalent work experience.
• Minimum of 7 years of experience in penetration testing, with a strong emphasis on application security.
• Proven expertise in web application security testing, including OWASP Top 10 vulnerabilities.
• Proficiency in using penetration testing tools such as Burp Suite, Metasploit, Nmap, and Kali Linux.
• Experience with scripting languages (e.g., Python, Bash) for automation.
• Strong understanding of secure coding principles and SDLC.
• Excellent analytical, reporting, and communication skills.
• Ability to lead and mentor a team effectively.
• Relevant certifications such as OSCP, CISSP, or GWAPT are highly desirable.
• Must be able to work full-time on-site in Cape Town.

Benefits

Our client offers a highly competitive salary, excellent health and retirement benefits, and generous paid time off. Employees have access to state-of-the-art security tools and opportunities for continuous learning and professional development. Working in the scenic Cape Town offers a unique lifestyle advantage. Join a forward-thinking company committed to maintaining the highest standards of application security.