Lead Penetration Tester - Web Application Security

Placements24; Cape Town; On-site; ZAR 900,000 - 1,500,000; Full time

Benefits offered by this job

Career progression

Bonuses

Training funding

Modern Cape Town office

Job summary

Placements24 is seeking a Lead Penetration Tester for our Cape Town office. You will lead complex engagements, assess web applications and APIs, and deliver actionable risk-based findings to clients.

You will mentor junior testers and stay current with evolving offensive security methodologies. The role demands at least 7 years in professional pentesting, strong OWASP knowledge, and hands-on scripting with Python/JavaScript/Bash.

Qualifications

• 7+ years of professional penetration testing experience.
• Strong web application security expertise including OWASP Top 10.
• Proficiency with industry-standard testing tools (Burp Suite, ZAP, Nmap, Metasploit).
• Experience scripting in Python/JavaScript/Bash.

Responsibilities

• Plan, scope, and execute penetration tests against web apps, APIs and related infrastructure.
• Identify, exploit, and document vulnerabilities including XSS, SQLi and auth bypass.
• Develop scripts/tools to automate testing and improve efficiency.
• Provide expert analysis, translating findings into business risk for clients.
• Author detailed test reports with remediation recommendations for technical and executive audiences.
• Mentor junior testers and promote continuous learning.

Skills

Penetration testing

Web app security

Mentoring

Report writing

Education

Bachelor's degree or equivalent experience

Tools

Burp Suite

OWASP ZAP

Nmap

Metasploit

Python

JavaScript

Bash

Job description

About the Role

Our client, a globally recognized leader in cybersecurity consulting, is seeking an exceptional Lead Penetration Tester to join their elite team in Cape Town, Western Cape . This senior-level position requires a highly skilled and motivated individual with a deep understanding of offensive security techniques, particularly in the realm of web application security. You will be responsible for leading complex penetration testing engagements, identifying vulnerabilities in critical web applications and infrastructure, and providing actionable recommendations to clients to enhance their security posture. This role is essential for maintaining the trust and security of our client's diverse clientele. The ideal candidate will possess a keen eye for detail, a passion for ethical hacking, and the ability to communicate technical findings clearly and effectively. The position is based in our state-of-the-art Cape Town office, offering a collaborative and challenging work environment.

Key Responsibilities

• Plan, scope, and execute comprehensive penetration tests against web applications, APIs, and related infrastructure.
• Identify, exploit, and document vulnerabilities, including but not limited to XSS, SQL injection, authentication bypass, and business logic flaws.
• Develop and utilize custom scripts and tools to automate testing and enhance efficiency.
• Provide expert analysis of findings, translating technical vulnerabilities into business risks for clients.
• Author detailed penetration test reports, presenting findings and remediation strategies to both technical teams and executive stakeholders.
• Mentor and guide junior penetration testers, fostering a culture of continuous learning and skill development.
• Stay current with the latest penetration testing methodologies, tools, and industry trends.
• Represent the company professionally during client interactions and presentations.

Requirements

• Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent extensive experience.
• A minimum of 7 years of experience in professional penetration testing, with a strong emphasis on web application security.
• Demonstrated expertise in OWASP Top 10 vulnerabilities and modern web application attack vectors.
• Proficiency with penetration testing tools such as Burp Suite, OWASP ZAP, Nmap, Metasploit, etc.
• Experience in scripting languages (e.g., Python, JavaScript, Bash).
• Excellent report writing and verbal communication skills.
• Ability to work independently and as part of a team in a fast-paced consulting environment.
• Relevant certifications such as OSCP, CEH, GWAPT, or GPEN are highly desirable.

Benefits

• Our client offers a highly competitive remuneration package, performance-based bonuses, generous annual leave, and extensive professional development opportunities, including funding for advanced certifications and training.
• The role provides a unique opportunity to work on diverse and challenging projects for leading organizations across various industries, based in our modern Cape Town office.
• Employees benefit from a supportive team culture, continuous learning initiatives, and access to cutting-edge security testing technologies.
• This is an excellent career move for ambitious security professionals looking to make a significant impact.