Lead Web Penetration Tester – Cape Town

Placements24; Cape Town; Sur place; ZAR 900 000 - 1 500 000; Plein temps

Avantages offerts par ce poste

Career progression

Bonuses

Training funding

Modern Cape Town office

Résumé du poste

Placements24 is seeking a Lead Penetration Tester for our Cape Town office. You will lead complex engagements, assess web applications and APIs, and deliver actionable risk-based findings to clients.

You will mentor junior testers and stay current with evolving offensive security methodologies. The role demands at least 7 years in professional pentesting, strong OWASP knowledge, and hands-on scripting with Python/JavaScript/Bash.

Qualifications

• 7+ years of professional penetration testing experience.
• Strong web application security expertise including OWASP Top 10.
• Proficiency with industry-standard testing tools (Burp Suite, ZAP, Nmap, Metasploit).
• Experience scripting in Python/JavaScript/Bash.

Responsabilités

• Plan, scope, and execute penetration tests against web apps, APIs and related infrastructure.
• Identify, exploit, and document vulnerabilities including XSS, SQLi and auth bypass.
• Develop scripts/tools to automate testing and improve efficiency.
• Provide expert analysis, translating findings into business risk for clients.
• Author detailed test reports with remediation recommendations for technical and executive audiences.
• Mentor junior testers and promote continuous learning.

Connaissances

Penetration testing

Web app security

Mentoring

Report writing

Formation

Bachelor's degree or equivalent experience

Outils

Burp Suite

OWASP ZAP

Nmap

Metasploit

Python

JavaScript

Bash

Description du poste

Placements24 is seeking a Lead Penetration Tester for our Cape Town office. You will lead complex engagements, assess web applications and APIs, and deliver actionable risk-based findings to clients.

You will mentor junior testers and stay current with evolving offensive security methodologies. The role demands at least 7 years in professional pentesting, strong OWASP knowledge, and hands-on scripting with Python/JavaScript/Bash.