Penetration Tester

Deka Minas (Pty) Ltd; Johannesburg; On-site; ZAR 600,000 - 900,000; Full time

Job summary

Deka Minas (Pty) Ltd is seeking a skilled Penetration Tester / Ethical Hacker to join their cybersecurity team in Johannesburg, South Africa. The successful candidate will conduct authorized security assessments and identify vulnerabilities in client environments. Key responsibilities include planning and executing penetration tests, ethical hacking, and client communication. Ideal candidates will have a relevant cybersecurity certification and experience in high-pressure environments. This role requires travel and possession of a valid driver's license and passport.

Qualifications

• Strong communication and presentation skills.
• High level of English proficiency; additional language skills are advantageous.
• Validation of cybersecurity certification related to penetration testing.

Responsibilities

• Plan and execute penetration tests against various environments.
• Identify security vulnerabilities through ethical hacking.
• Liaise with clients and present assessment reports.

Skills

Interpersonal skills

Communication skills

Analytical ability

Report writing skills

English proficiency

Networking protocols

Programming languages

Education

Cybersecurity certification (OSCP, CPPT, CompTIA PenTest+)

CEH with additional cert

Tools

Linux

Windows

IDS/IPS

Job description

Kindly note that this position is based in The Middle East, expatriation benefits apply!

We are seeking a skilled and motivated Penetration Tester / Ethical Hacker to join our cybersecurity team. The successful candidate will be responsible for conducting authorized security assessments against client environments, identifying vulnerabilities, and providing actionable remediation guidance. This role requires strong technical expertise, excellent communication skills, and the ability to operate in high‑pressure environments.

Key Responsibilities

• Plan, execute, and deliver penetration tests and security assessments against:
  • Enterprise infrastructure
  • Web applications
  • Mobile applications and services
• Conduct ethical hacking activities to identify security vulnerabilities, misconfigurations, and weaknesses.
• Liaise directly with clients, clearly communicating technical findings and presenting assessment reports.
• Research emerging threats, attack techniques, and exploitation methods to enhance assessment effectiveness.
• Design, build, and maintain custom tools and scripts to support penetration testing activities.
• Develop exploits and proof‑of‑concept attacks where required to demonstrate risk.
• Maintain a strong understanding of corporate and enterprise systems and networks from a security perspective.
• Stay current with industry trends, tools, and adversary tactics used within the cybersecurity community.
• Participate in the continuous improvement of testing methodologies and internal processes.
• Experience with deception‑based technologies (e.g., honeypots and honeytokens) will be considered an advantage.

Requirements

• Willing and able to travel, domestically and internationally, as required. *
• In possession of a valid passport. *
• In possession of a valid South African driver’s license.
• Own a reliable vehicle.
• Must have no criminal record. *
• Eligible to work in South Africa without requiring a work permit, or already in possession of a valid work permit with at least one year validity remaining. *
• Able to work both independently and collaboratively within a team environment.
• Comfortable working in highly pressurized and stressful environments.
• Willing to work overtime when operational requirements demand.
• Professional, ethical, and responsible approach to handling sensitive client data.

Qualifications and Skills

• Strong interpersonal, communication, and presentation skills.
• Excellent analytical ability with strong report writing skills and a high level of English proficiency. *
  • Additional language skills are advantageous.
• A recognized cybersecurity certification related to penetration testing, such as:
  • OSCP, CPPT, CompTIA PenTest+, or equivalent *
  • CEH is acceptable only if accompanied by an additional penetration testing certification. *
• Solid understanding of:
  • Cyber threats and threat actors
  • Information security principles
  • Security monitoring, detection, and response
• Hands‑on familiarity with:
  • Networking protocols, ports, and services
  • Intrusion Detection and Prevention Systems (IDS/IPS)
  • Malware analysis concepts
  • Application‑layer attack vectors
  • Windows and Linux operating systems *
• Working knowledge of programming and scripting languages such as Python, Go, or similar. *
• Active participation in cybersecurity communities, open‑source projects, or security research initiatives is highly desirable.