Security Analyst Penetration Testing & Red Teaming Specialist

The Legends Agency; Johannesburg; Hybrid; ZAR 200 000 - 300 000; Full time

Job summary

A niche cybersecurity firm is seeking a Security Analyst Penetration Testing & Red Teaming Specialist in Johannesburg. In this role, you will conduct hands-on penetration tests and engage with clients to deliver technical insights. Ideal candidates will have 2-5 years of experience in penetration testing and proficiency with tools like Burp Suite and Metasploit. A passion for offensive security and creative problem-solving is essential, and a hybrid working model is offered.

Qualifications

• 2-5 years of practical penetration testing experience.
• Ability to think creatively like an attacker.
• Clear written and verbal communication skills.

Responsibilities

• Conduct hands-on penetration tests and red team assessments.
• Perform vulnerability assessments across various technologies.
• Engage directly with clients to deliver findings.

Skills

Penetration testing

Vulnerability assessments

OSINT techniques

Social engineering

Technical communication

Tools

Burp Suite

Metasploit

Cobalt Strike

Kali Linux

Job description

Security Analyst Penetration Testing & Red Teaming Specialist
Push the boundaries of offensive security in a specialist cyber team
Gauteng (Hybrid) | R60,000 -R65,000 per month

About Our Client

Our client is a niche cybersecurity firm that lives and breathes offensive security. Operating in a technically elite environment, they partner with leading organisations to proactively identify, test, and close security gaps before real-world attackers strike.

You’ll be part of a passionate team of red teamers and penetration testers, working on high-impact projects that demand creative thinking, technical depth, and a constant hunger for research and learning.

The Role: Security Analyst Penetration Testing & Red Teaming Specialist

In this role, you’ll perform hands‑on penetration testing and advanced red team assessments across a wide spectrum of technologies and attack surfaces. Your mission is to simulate real-world threats, uncover exploitable vulnerabilities, and contribute to robust defensive strategies through well-documented insights and custom tooling. This is a dynamic position for someone who wants to challenge the norm, test limits, and make a direct impact in the cybersecurity landscape.

Key Responsibilities

• 2-5 years of experience conducting penetration tests in real-world environments

• Perform vulnerability assessments and manual penetration testing across networks, web apps, thick clients, mobile, wireless, and physical environments

• Engage directly with clients to deliver technical findings, insights, and remediation recommendations

• Participate in red team operations using OSINT, social engineering, and physical compromise techniques

• Develop and deploy custom payloads and C2 infrastructure to simulate adversarial behaviour

• Refine and develop stealthy TTPs to evade detection and test defence readiness

• Conduct research into new vulnerabilities and exploit development

• Contribute to tool development and methodology refinement

• Analyse threat actor behaviour to inform creative offensive and defensive strategies

About You

• 2-5 years of practical penetration testing experience (network, web, mobile, wireless)

• Familiarity with tools like Burp Suite, Metasploit, Cobalt Strike, Kali Linux, etc.

• Ability to approach problems creatively and think like an attacker

• Clear and concise communicator (written and verbal)

• Research-driven mindset with a desire to stay at the bleeding edge of security trends

• High-performance orientation, thrives in technical, fast-paced environments

• Self-motivated, curious, and committed to growth in red teaming and offensive security