Penetration Tester (Ethical Hacker)

Placements24; Durban; On-site; ZAR 420,000 - 780,000; Full time

Job summary

Placements24 in Durban, KwaZulu-Natal, is seeking a highly skilled Penetration Tester to join our security team on-site. You will identify vulnerabilities, conduct authorized tests across networks, web and mobile apps, and deliver detailed, actionable reports with remediation guidance.

Ideal candidates will have deep knowledge of attack vectors, experience with tools like Metasploit, Burp Suite, Nmap and Kali Linux, and relevant certifications such as OSCP/CEH.

Qualifications

• Proven experience conducting authorized penetration tests.
• Deep knowledge of common vulnerabilities including OWASP Top 10.
• Ability to develop PoC exploits and demonstrate impact.
• Strong analytical and reporting skills for technical and non-technical audiences.

Responsibilities

• Perform authorized penetration tests on external and internal networks, web applications, and mobile applications.
• Identify security vulnerabilities and weaknesses through various testing methodologies.
• Develop and execute proof-of-concept exploits to demonstrate the impact of identified vulnerabilities.
• Document findings in comprehensive, clear, and actionable reports for technical and non-technical audiences.
• Provide recommendations for remediation and work with technical teams to implement solutions.
• Stay up-to-date with the latest attack techniques, tools, and trends in the cybersecurity landscape.
• Research and develop new penetration testing methodologies and tools.
• Collaborate with security architects and engineers to improve overall security posture.
• Maintain strict confidentiality and ethical conduct throughout all engagements.
• Participate in security reviews and provide expert security advice.

Skills

Penetration testing

OWASP Top 10

Reporting

Attacker mindset

Communication

Education

OSCP/CEH/GPEN/CISSP or equivalent

Tools

Metasploit

Burp Suite

Nmap

Kali Linux

Job description

About the Role

Our client is seeking a highly skilled and ethical Penetration Tester to join their dynamic security team in Durban, KwaZulu-Natal. This role is critical for identifying vulnerabilities in our client's systems, networks, and applications before malicious actors can exploit them. You will conduct simulated cyberattacks to assess security weaknesses and provide detailed reports with actionable recommendations for remediation. The ideal candidate is a creative problem-solver with a deep understanding of attack vectors, exploitation techniques, and defensive measures. This is an exciting opportunity to contribute to a robust security framework in a vibrant coastal city. The position requires on-site presence in Durban for focused security assessments and collaborative efforts.

Key Responsibilities

• Perform authorized penetration tests on external and internal networks, web applications, and mobile applications.
• Identify security vulnerabilities and weaknesses through various testing methodologies.
• Develop and execute proof-of-concept exploits to demonstrate the impact of identified vulnerabilities.
• Document findings in comprehensive, clear, and actionable reports for technical and non-technical audiences.
• Provide recommendations for remediation and work with technical teams to implement solutions.
• Stay up-to-date with the latest attack techniques, tools, and trends in the cybersecurity landscape.
• Research and develop new penetration testing methodologies and tools.
• Collaborate with security architects and engineers to improve overall security posture.
• Maintain strict confidentiality and ethical conduct throughout all engagements.
• Participate in security reviews and provide expert security advice.

Requirements

• Proven experience as a Penetration Tester or in a similar cybersecurity role.
• In-depth knowledge of common vulnerabilities (e.g., OWASP Top 10) and exploitation techniques.
• Proficiency with penetration testing tools (e.g., Metasploit, Burp Suite, Nmap, Kali Linux).
• Strong understanding of networking protocols, operating systems, and web technologies.
• Excellent analytical, problem-solving, and reporting skills.
• Ability to think like an attacker and devise creative testing approaches.
• Relevant certifications such as OSCP, CEH, GPEN, or CISSP are highly valued.
• Must be based in or willing to work from our Durban location.
• Excellent communication skills for report writing and stakeholder engagement.

Benefits

This role offers a competitive salary and the opportunity to work on diverse and challenging security projects. As a contractor, you will have flexibility in your engagement. Our client provides access to advanced security tools and training resources. Being part of the security team in Durban allows for close collaboration and direct impact on enhancing the organization's security defenses. This is an excellent opportunity for a skilled penetration tester to apply their expertise in a meaningful way.