Remote Penetration Tester (Junior–Mid): Web, API & Cloud

Recruit CRM; Johannesburg; Remote; ZAR 240,000 - 480,000; Full time

Job summary

Redherd is seeking a Junior to Mid-Level Security Analyst / Penetration Tester to join a respected cybersecurity consultancy. You’ll gain hands-on experience across web apps, APIs, infrastructure, cloud, and mobile platforms, performing real-world security assessments and contributing to remediation guidance.

Ideal for early-career security professionals who are curious, technically motivated, and eager to deepen offensive testing skills with Burp Suite, Nmap, and Kali Linux, while learning

Qualifications

• 1–3+ years of experience in penetration testing or offensive security.
• Foundational web app security concepts and OWASP Top 10.
• Familiarity with Burp Suite, Nmap, Kali Linux or similar tooling.
• Basic scripting in Python, Bash, or PowerShell.
• Strong written communication and ability to document findings clearly.
• Curiosity and willingness to learn offensive security techniques.

Responsibilities

• Assist in penetrating tests across web apps, APIs, mobile apps, infrastructure, and cloud.
• Identify security vulnerabilities like authentication flaws and OWASP risks.
• Support testing of networks and Active Directory environments.
• Assist with cloud security assessments on AWS/Azure.
• Document findings with clear evidence and remediation guidance.
• Help validate findings with senior analysts and participate in QA.

Skills

Penetration testing

Vulnerability assessment

Security tooling

Scripting basics

Communication skills

Curiosity & learning

Tools

Burp Suite

Nmap

Kali Linux

Python

Bash

PowerShell

Job description

Redherd is seeking a Junior to Mid-Level Security Analyst / Penetration Tester to join a respected cybersecurity consultancy. You’ll gain hands-on experience across web apps, APIs, infrastructure, cloud, and mobile platforms, performing real-world security assessments and contributing to remediation guidance.

Ideal for early-career security professionals who are curious, technically motivated, and eager to deepen offensive testing skills with Burp Suite, Nmap, and Kali Linux, while learning