About the Role
Our client, a prominent cybersecurity consultancy firm with a growing presence in Nelspruit, Mpumalanga , is seeking a skilled and certified Penetration Tester to join their elite offensive security team. This role involves simulating cyberattacks against client systems to identify vulnerabilities and provide actionable recommendations for strengthening their security defenses. You will conduct thorough assessments of networks, applications, and infrastructure, employing a wide range of ethical hacking techniques. The ideal candidate is highly curious, possesses excellent problem-solving skills, and has a passion for uncovering security weaknesses before malicious actors can exploit them. This is a challenging and rewarding opportunity for security enthusiasts looking to work on diverse projects and make a real impact.
Key Responsibilities
- Perform comprehensive penetration tests on client networks, web applications, mobile applications, APIs, and cloud environments.
- Identify security vulnerabilities, misconfigurations, and potential exploits using various manual and automated testing tools.
- Document findings meticulously, including detailed technical descriptions, evidence, and risk assessments.
- Provide clear, concise, and actionable remediation recommendations to clients.
- Stay up-to-date with the latest penetration testing techniques, tools, and industry trends.
- Collaborate with clients to understand their security requirements and scope testing activities effectively.
- Assist in developing and refining penetration testing methodologies and procedures.
- Participate in red teaming exercises and vulnerability assessments.
- Present test findings and recommendations to clients in a professional manner.
- Maintain strict confidentiality and ethical standards throughout all engagements.
Requirements
- Bachelor's degree in Computer Science, Cybersecurity, IT, or a related field; equivalent experience considered.
- Minimum of 3 years of professional experience in penetration testing or ethical hacking.
- Proven experience in conducting network, web application, and/or mobile application penetration tests.
- Proficiency with penetration testing tools such as Metasploit, Burp Suite, Nmap, Wireshark, and Kali Linux.
- Strong understanding of common vulnerabilities (e.g., OWASP Top 10, SANS Top 25) and attack vectors.
- Familiarity with scripting languages (e.g., Python, Bash) for tool automation and exploitation.
- Excellent analytical, problem-solving, and critical thinking skills.
- Strong written and verbal communication skills, with the ability to produce detailed technical reports.
- Must be able to work independently and as part of a team.
- Relevant certifications such as OSCP, CEH, PenTest+, or CISSP are highly preferred.
Benefits
- Our client offers a competitive salary package, comprehensive medical benefits, and opportunities for professional development and certification.
- This hybrid role provides flexibility, allowing you to balance office-based collaboration with remote work.
- You will work with a talented team of security experts, tackle challenging and diverse projects, and continuously enhance your skills using state-of-the-art tools.
- Benefits include performance bonuses, generous paid time off, and a supportive work environment focused on ethical security practices and client success.