Penetration Tester - Application Security

Placements24; Pretoria; Hybrid; ZAR 482,000 - 827,000; Full time

Benefits offered by this job

Competitive contractor rates

Hybrid work arrangement

Professional growth

Access to security tools

Networking opportunities

Job summary

Placements24 is seeking a Penetration Tester with a strong focus on Application Security in Pretoria, Gauteng. The role spans testing web, mobile, and API endpoints, using Burp Suite, OWASP ZAP, and Metasploit, with reporting and remediation guidance for clients.

You will work across a team of security professionals, contributing to practical security improvements, code reviews, and continuous learning in a hybrid office/remote setup.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or related field, or equivalent practical experience.
• Minimum of 4 years of penetration testing experience with focus on application security.
• Experience testing web applications, mobile applications (iOS/Android), and RESTful APIs.
• Proficiency with common penetration testing tools and frameworks.
• Strong understanding of common web vulnerabilities (XSS, SQL Injection, CSRF) and their exploitation.
• Knowledge of secure coding practices and application security principles.
• Experience with programming or scripting languages (Python, JavaScript, Bash).
• Excellent written and verbal communication for reporting and client interaction.
• Relevant certifications such as GWAPT, GPEN, OSCP, or CEH are desirable.
• Ability to work effectively both independently and as part of a team.

Responsibilities

• Conduct penetration tests on web applications, mobile applications, and APIs.
• Identify security vulnerabilities, including OWASP Top 10 issues.
• Utilize penetration testing tools and techniques (e.g., Burp Suite, OWASP ZAP, Metasploit).
• Perform security code reviews to identify potential flaws in application logic and implementation.
• Document findings in detailed, professional reports, including risk assessment and remediation recommendations.
• Collaborate with client development teams to explain vulnerabilities and guide remediation efforts.
• Stay up-to-date with the latest application security threats, trends, and testing methodologies.
• Develop and maintain testing methodologies and playbooks.
• Participate in red team exercises and adversarial simulations.
• Contribute to the development of new service offerings in application security.

Skills

Penetration testing

Application security

Python

JavaScript

Education

Bachelor's degree in Computer Science, Cybersecurity, or related field

Tools

Burp Suite

OWASP ZAP

Metasploit

Job description

About the Role

Our client, a prominent cybersecurity consulting firm operating out of Pretoria, Gauteng , is looking for a skilled Penetration Tester with a strong focus on Application Security. This hybrid role offers the exciting opportunity to identify vulnerabilities in web applications, mobile applications, and APIs for a diverse range of clients. You will be responsible for planning, executing, and reporting on penetration tests, providing actionable recommendations to enhance application security. The ideal candidate is a creative and methodical security professional with a passion for finding weaknesses before malicious actors do. You will join a team of elite ethical hackers and contribute to a culture of continuous learning and technical excellence. This position demands a proactive approach to security testing and a commitment to delivering high-quality results. The hybrid model allows for a balance between collaborative office work in Pretoria and flexible remote work.

Key Responsibilities

• Conduct thorough penetration tests on web applications, mobile applications, and APIs.
• Identify security vulnerabilities, including but not limited to OWASP Top 10 issues.
• Utilize various penetration testing tools and techniques (e.g., Burp Suite, OWASP ZAP, Metasploit).
• Perform security code reviews to identify potential flaws in application logic and implementation.
• Document findings in detailed, professional reports, including risk assessment and remediation recommendations.
• Collaborate with client development teams to explain vulnerabilities and guide remediation efforts.
• Stay up-to-date with the latest application security threats, trends, and testing methodologies.
• Develop and maintain testing methodologies and playbooks.
• Participate in red team exercises and adversarial simulations.
• Contribute to the development of new service offerings in application security.

Requirements

• Bachelor's degree in Computer Science, Cybersecurity, or a related field, or equivalent practical experience.
• Minimum of 4 years of experience in penetration testing, with a significant focus on application security.
• Demonstrated experience in testing web applications, mobile applications (iOS/Android), and RESTful APIs.
• Proficiency with common penetration testing tools and frameworks.
• Strong understanding of common web vulnerabilities (XSS, SQL Injection, CSRF, etc.) and their exploitation.
• Knowledge of secure coding practices and application security principles.
• Experience with programming or scripting languages (e.g., Python, JavaScript, Bash) is beneficial.
• Excellent written and verbal communication skills for reporting and client interaction.
• Relevant certifications such as GWAPT, GPEN, OSCP, or CEH are highly desirable.
• Ability to work effectively both independently and as part of a team.

Benefits

• Competitive contractor rates and potential for long-term engagements.
• Exposure to a wide variety of challenging security projects.
• Opportunities for professional growth and skill development.
• Collaborative and expert team environment in Pretoria .
• Flexible hybrid work arrangement.
• Access to industry-leading security tools and resources.
• Networking opportunities within the cybersecurity community.
• Contribution to securing critical applications.