Network Security Engineer

Gmi Advisory; Johannesburg; On-site; ZAR 500 000 - 750 000; Full time

Job summary

A cybersecurity firm in Johannesburg is looking for an experienced penetration tester to lead assessment efforts on web and mobile applications. You will replicate malicious techniques, prepare detailed reports for stakeholders, and consult on security improvements. Candidates should have a bachelor’s degree and 3+ years of experience in IT, including ethical hacking and vulnerability assessments. This role requires strong communication skills and proficiency with penetration testing tools, ensuring the firm maintains high security standards.

Qualifications

• 3+ years of IT experience.
• 1+ years of hands-on web application penetration testing / ethical hacking experience.

Responsibilities

• Lead testing efforts on web and mobile applications.
• Replicate techniques and tools used by attackers.
• Prepare reports and present results to stakeholders.
• Analyse test results and develop exploit examples.
• Consult with teams to address weaknesses.
• Contribute to the development of vulnerability discovery tools.
• Identify threats to improve security.

Skills

Manual testing experience including OWASP

Knowledge of application security mechanisms

Recognizing application security vulnerabilities

Experience with penetration testing tools

Knowledge of programming languages

Experience with web services technologies

Experience with web application frameworks

Analytical and problem-solving skills

Excellent interpersonal skills

Communication and presentation skills

Ability to produce high-level reports

Education

Bachelors degree / Diploma or equivalent experience

Tools

Nmap

Wireshark

Nessus

Kali

Metasploit

AppScan

WebInspect

Burp Suite Professional

Acunetix

Arachni

w3af

NTOSpider

Job description

Qualifications

• Bachelors degree / Diploma or equivalent experience
• 3+ years of IT experience
• 1+ years of hands‑on web application penetration testing / ethical hacking experience

The Purpose of Your Role

• Lead testing efforts on web and mobile applications and supporting systems.
• Replicate the actual techniques and tools used by malicious attackers in an effort to model potential external threats.
• Upon completion of the assessment, you will prepare reports and present the results to application owners, developers, and business unit information security teams.
• Analyse test results, draw conclusions from results, and develop targeted exploit examples.
• Consult with operations and software‑development teams to ensure potential weaknesses are addressed.
• Contribute to the research or development of tools to assist in the vulnerability discovery process.
• Identify threats to improve the overall security of applications and infrastructure.
• Recommend solutions to help mitigate risks and protect the entire network i.e., architect security solution.

Skills

• Ability to demonstrate manual testing experience including all of OWASP.
• Working knowledge of application security mechanisms such as authentication and authorization techniques, data validation, and the proper use of encryption.
• Technical knowledge of, and the ability to recognize, various types of application security vulnerabilities.
• Demonstrated experience with common penetration testing and vulnerability assessment tools such as nmap, Wireshark, Nessus, NeXpose, Kali, Metasploit, AppScan, WebInspect, Burp Suite Professional, Acunetix, Arachni, w3af, NTOSpider.
• Knowledge of a programming or scripting language such as C, C#, Python, Objective C, Java, Javascript, SQL.
• Knowledge of web services technologies such as XML, JSON, SOAP, REST, and AJAX.
• Knowledge of web frameworks, including XML, SOAP, J2EE, JSON and Ajax.
• Experience with enterprise Java or .NET web application frameworks, including Struts and Spring.
• Proven analytical and problem‑solving skills, as well as the desire to assist others in solving issues.
• Excellent interpersonal skills with a strong interest in the application security domain.
• Excellent communication and presentation skills and a proven ability to communicate threats and facilitate progress towards long‑term remediation.
• Highly motivated with the willingness to take ownership/responsibility for their work and the ability to work alone or as part of a team.
• Ability to produce high‑level reports.

Preferred Skills and Competencies

• A+, N+, S+, CCNA
• Vulnerability Scanning
• Vulnerability Assessment
• Valid Certified Ethical Hacker Certificate
• Certified Penetration Testing Professional / OR CISA / CISM / SISSP AND CISSP certification.