Penetration Tester – Web, Mobile & Cloud

Discovery Limited; Sandton; On-site; ZAR 650,000 - 900,000; Full time

Job summary

Discovery Limited is seeking an Information Security Analyst – PenTester in Sandton, Gauteng to join the Information Governance and Security team. You will perform penetration tests that mirror real-world attacks on web and mobile applications within the Discovery Group.

The role requires hands-on expertise in planning tests, creating scripts, and delivering clear reports with risk-based recommendations to stakeholders. A strong security mindset and collaboration are essential.

Qualifications

• 3-5 years of penetration testing experience including web, mobile and cloud apps.
• Relevant security certifications (CEH, GPEN, OSCP, CREST, etc.).
• Degree in Computer Science/Engineering advantageous.
• Mastery of Linux/Windows/macOS.
• Familiarity with penetration testing methodology and standards.

Responsibilities

• Plan and create penetration methods, scripts and tests.
• Carry out penetration testing to expose weaknesses in security.
• Simulate security breaches to test a system's security posture.
• Create reports with findings, risk levels and recommendations.
• Advise on fixes to lower security risks to systems.
• Present findings and conclusions to stakeholders.
• Understand business impact of identified flaws if not fixed.
• Stay updated with latest attack methodologies and tricks.

Skills

Penetration Testing

Security Assessments

Linux/Windows/macOS

Scripting (Python, PowerShell)

Threat Analysis

Education

Computer Science degree

Security Certifications (CEH, GPEN, OSCP)

Tools

Linux

PowerShell

Python

Burp Suite

Nessus

Job description

Discovery Limited is seeking an Information Security Analyst – PenTester in Sandton, Gauteng to join the Information Governance and Security team. You will perform penetration tests that mirror real-world attacks on web and mobile applications within the Discovery Group.

The role requires hands-on expertise in planning tests, creating scripts, and delivering clear reports with risk-based recommendations to stakeholders. A strong security mindset and collaboration are essential.