Lead Penetration Tester - Application Security Expert

Placements24; Cape Town; On-site; ZAR 900,000 - 1,300,000; Full time

Benefits offered by this job

Private healthcare

Pension plan

Life insurance

Career advancement opportunities

Access to security tools

Vibrant Cape Town office

Job summary

Placements24 in Cape Town is seeking a Lead Penetration Tester to spearhead application security initiatives. You will lead a team of security professionals, conduct in-depth tests on web apps, APIs, mobile apps and cloud environments, and translate findings into actionable remediation guidance.

You will mentor junior testers, refine testing methodologies, collaborate with development teams to remediate findings, perform SAST/DAST, research threats, and contribute to secure coding practices

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, or related field, or equivalent practical experience.
• 5+ years hands-on penetration testing, with application security specialization.
• Proficiency in identifying and exploiting common web vulnerabilities (OWASP Top 10).
• Experience with Burp Suite, OWASP ZAP, Nmap, Metasploit, etc.
• Cloud security assessments (AWS, Azure, GCP) preferred.
• Strong SSDLC understanding and reporting abilities.
• Certs like OSCP, CEH, GWAPT advantageous.

Responsibilities

• Lead and conduct penetration tests on web apps, APIs, mobile apps, and cloud environments.
• Develop and refine pen testing methodologies and tools.
• Mentor junior testers and promote continuous learning.
• Collaborate with development teams to remediate findings and provide actionable recommendations.
• Perform security code reviews and SAST/DAST assessments.
• Research threats and communicate risk to stakeholders.
• Generate comprehensive reports detailing vulnerabilities and remediation steps.
• Support secure coding practices within engineering.

Skills

Penetration testing

Web security

Team leadership

Communication

Education

Bachelor's degree in Cybersecurity/CS

Tools

Burp Suite

OWASP ZAP

Nmap

Metasploit

AWS

Azure

GCP

Job description

About the Role

Our client, a fast-growing tech firm based in the vibrant city of Cape Town, Western Cape , is looking for a Lead Penetration Tester to spearhead their application security initiatives. This pivotal role involves leading a team of security professionals in identifying vulnerabilities and ensuring the security posture of web and mobile applications. You will be instrumental in developing and executing comprehensive penetration testing strategies, providing actionable insights, and collaborating closely with development teams to remediate findings. This is an exciting opportunity to make a significant impact on the security of our client's cutting-edge products and services. The role is based in our modern Cape Town office, offering a dynamic and collaborative work environment.

Key Responsibilities

• Lead and conduct in-depth penetration tests on web applications, APIs, mobile applications, and cloud environments.
• Develop and refine penetration testing methodologies and tools to identify security weaknesses.
• Mentor and guide junior penetration testers, fostering a culture of continuous learning and skill development.
• Collaborate with development and engineering teams to provide timely and practical security recommendations.
• Perform security code reviews and static/dynamic application security testing (SAST/DAST).
• Research emerging threats and vulnerabilities, and their potential impact on the organization.
• Develop comprehensive reports detailing identified vulnerabilities, risk assessments, and remediation strategies.
• Contribute to the enhancement of secure coding practices and security awareness within the engineering department.

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, or a related field, or equivalent practical experience.
• 5+ years of hands-on experience in penetration testing, with a specialization in application security.
• Demonstrated expertise in identifying and exploiting common web vulnerabilities (e.g., OWASP Top 10).
• Proficiency with penetration testing tools such as Burp Suite, OWASP ZAP, Nmap, Metasploit, etc.
• Experience with cloud security assessments (AWS, Azure, GCP) is highly preferred.
• Strong understanding of secure software development lifecycle (SSDLC) principles.
• Excellent reporting and communication skills, capable of articulating complex technical findings.
• Relevant certifications like OSCP, CEH, GWAPT are advantageous.

Benefits

• An attractive annual salary package of up to ZAR .
• Comprehensive private healthcare coverage.
• Pension fund and life insurance benefits.
• Significant opportunities for career advancement and professional training.
• Access to the latest security testing tools and resources.
• Be part of an innovative and forward-thinking company in beautiful Cape Town .
• Regular team-building events and a vibrant office culture.