Penetration Tester - Application Security

Placements24; Mossel Bay; Presencial; ZAR 300.000 - 600.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

On-site in Mossel Bay

Descripción de la vacante

Placements24 is partnering with a leading technology solutions provider in Mossel Bay, Western Cape, for a contract Penetration Tester focusing on Application Security. The on-site role demands hands-on testing of web apps, APIs and mobile apps, with impactful reporting.

You will document vulnerabilities, work with development teams to fix issues, and stay current with OWASP Top 10 and testing methodologies to strengthen the software lifecycle.

Formación

• Bachelor's degree in CS, cybersecurity, or equivalent.
• 4+ years in penetration testing with a focus on applications.
• Experience testing web, mobile, and API apps across platforms.
• Deep knowledge of OWASP Top 10 vulnerabilities.

Responsabilidades

• Perform tests on web applications, APIs, and mobile apps.
• Identify and document vulnerabilities with evidence.
• Use Burp Suite, OWASP ZAP, Metasploit, and other tools.
• Conduct code reviews for security flaws and design weaknesses.
• Prepare detailed risk assessments and remediation recommendations.
• Collaborate with development teams to fix issues.
• Stay up-to-date with application security threats and testing methods.

Conocimientos

Analytical thinking

Problem solving

Communication skills

On-site work capability

Educación

Bachelor's degree in Computer Science / Cybersecurity

Herramientas

Burp Suite

OWASP ZAP

Metasploit

Postman

SQLMap

Descripción del empleo

About the Role

Our client, a leading technology solutions provider, is seeking an experienced Penetration Tester with a strong focus on Application Security to join their team in **Mossel Bay, Western Cape**. This is a **contractor** position with the expectation of **on-site** work in **Mossel Bay**. You will be responsible for identifying security vulnerabilities in web applications, APIs, and mobile applications through simulated attacks. Your expertise will be crucial in helping our client secure their software development lifecycle and protect their users from cyber threats. The ideal candidate is passionate about offensive security, possesses deep technical knowledge of application vulnerabilities (e.g., OWASP Top 10), and is skilled in using various penetration testing tools and methodologies. This role requires a proactive mindset, excellent reporting skills, and the ability to work independently while collaborating with development teams.

Key Responsibilities

• Perform comprehensive penetration tests on web applications, APIs, and mobile applications.
• Identify, exploit, and document security vulnerabilities, including but not limited to SQL injection, XSS, CSRF, authentication bypass, and insecure direct object references.
• Utilize a variety of penetration testing tools (e.g., Burp Suite, OWASP ZAP, Metasploit) and techniques.
• Conduct code reviews to identify security flaws from a developer's perspective.
• Analyze application architecture and design for potential security weaknesses.
• Develop detailed and accurate penetration test reports, including risk assessments and remediation recommendations.
• Collaborate with development and engineering teams to provide guidance on fixing identified vulnerabilities.
• Stay up-to-date with the latest application security threats, vulnerabilities, and testing techniques.
• Contribute to the development and maintenance of penetration testing methodologies and standards.
• Participate in security awareness training for development teams.

Requirements

• Bachelor's degree in Computer Science, Cybersecurity, or a related field, or equivalent practical experience.
• Minimum of 4 years of experience in penetration testing, with a significant focus on application security.
• Proven experience testing various types of applications (web, mobile, API) across different platforms.
• Deep understanding of OWASP Top 10 vulnerabilities and how to identify and exploit them.
• Proficiency with penetration testing tools such as Burp Suite, Postman, SQLMap, etc.
• Familiarity with secure coding practices and common programming languages (e.g., Java, Python, JavaScript, C#).
• Experience with vulnerability assessment tools and SAST/DAST.
• Strong analytical and problem-solving skills.
• Excellent written and verbal communication skills for reporting and presenting findings.
• Relevant certifications such as OSCP, CEH (with AppSec focus), GWAPT are highly desirable.
• Ability to work **on-site** in **Mossel Bay, Western Cape**.

Benefits

• A competitive contract rate, estimated at R annually based on project scope and duration.
• Opportunity to work on diverse and challenging application security projects.
• Exposure to modern application development practices.
• Collaborate with a team of security professionals in **Mossel Bay**.
• Gain valuable experience in a contract role with potential for extension or future projects.
• Contribute directly to the security of innovative software products.
• Build a strong portfolio of successful penetration tests.