Security Analyst - Penetration Testing & Red Teaming

The Legends Agency; Johannesburg; On-site; ZAR 400,000 - 600,000; Full time

Job summary

A leading cybersecurity agency is seeking a talented Security Analyst specializing in Penetration Testing and Red Teaming. The role involves collaborating with a team on a variety of security assessments, engaging with clients, and evolving methodologies to enhance security strategies. Ideal candidates should have 2-5 years of experience in hands-on penetration testing with a passion for continuous learning in the cybersecurity domain.

Qualifications

• 2-5 years' experience in Penetration Testing across various security domains.
• Strong understanding of vulnerability assessment tools and techniques.
• Ability to creatively address complex security challenges.

Responsibilities

• Conduct vulnerability assessments and penetration tests across diverse technologies.
• Be part of a Red Team focusing on system compromises and data exfiltration.
• Research and refine attack methodologies to strengthen defensive measures.

Skills

Vulnerability Assessment

Penetration Testing

Network Security

Web Security

Mobile Security

Wireless Security

Critical Thinking

Communication

Tools

Penetration Testing Tools

OSINT Tools

Job description

Exciting Opportunity: Security Analyst: Penetration Testing & Red Teaming Specialist

Our client is looking for a talented Security Analyst who is ready to take on a variety of security assessments and grow their career in a high-energy, cutting-edge environment.

Responsibilities:

Penetration Testing:

• Collaborate within a team of experts to conduct vulnerability assessments and penetration tests across a wide range of technologies.
• Assess network, application (web and thick client), mobile, wireless, social engineering, and physical security, using both automated and manual techniques.
• Engage with clients professionally to deliver insights and constructive feedback, ensuring their security needs are met.
• Dive deep into security topics like network, database, and application security, developing your expertise along the way.
• Leverage your skills with penetration testing tools to uncover vulnerabilities and improve security measures.

Red Teaming:

• Become part of an elite Red Team, focusing on reconnaissance using open-source intelligence (OSINT) to gather actionable data.
• Take the lead in compromising systems by identifying vulnerabilities in people, processes, and technology.
• Develop and deploy command-and-control servers and custom payloads, establishing persistence within target environments.
• Evolve your craft by creating new tools, techniques, and procedures to avoid detection by defenders.
• Work on escalation, maintaining long-term access to compromised networks, and exfiltrating critical data.

Research and Development:

• Stay ahead of the curve by researching and identifying new vulnerabilities, focusing on high-profile products and systems.
• Understand and analyze the latest tactics used by threat actors to craft innovative security strategies.
• Develop and refine attack methodologies that will be used to strengthen future defensive efforts.

Requirements:

Experience:

• 2-5 years' hands-on Penetration Testing, including a strong background in network, mobile, web, and wireless security assessments.
• Strong understanding of common vulnerability assessment and penetration testing tools.
• Ability to think critically and creatively to solve complex security challenges.
• Strong communication skills for both internal collaboration and client-facing interactions.
• Passion for continuous learning and staying updated on the latest in cybersecurity.