Senior AI Application Security Engineer

Techrepo.co.za; Randburg; On-site; ZAR 700,000 - 900,000; Full time

Job summary

Techrepo.co.za is seeking a senior penetration tester to help safeguard clients' digital assets. You will conduct manual and automated testing across web apps, APIs, mobile apps, and cloud workloads, identifying risks and guiding remediation.

The role requires 5+ years of pentesting experience, proficiency with Burp Suite, Nmap, Nessus, Metasploit, MobSF, Frida, OCSP, and the ability to translate technical findings into business impact.

Qualifications

• 5+ years of penetration testing experience.
• Deep knowledge of OWASP Top 10 (Web, API) and Business Logic Exploitation.
• Experience with AI assisted penetration testing tools and LLM-based attacks.

Responsibilities

• Lead advanced penetration testing across web, mobile, API, and cloud-native environments.
• Conduct black-box and white-box testing and risk validation.
• Produce executive and technical reports with remediation guidance.
• Mentor junior testers and contribute to security standards.

Skills

Problem solving

Analytical skills

Business impact

Communication

Collaboration

Independent work

Education

Bachelor's/Advanced Diploma in Physical, Mathematical, Computer or Life Sciences

Tools

Burp Suite

Nmap

Nessus

Metasploit

SAT/DAST tools

MobSF

Frida

Objection

eJPT

CEH

OCSP

Job description

Job Description

About the Role Empowering Africa’s tomorrow, together…one story at a time. With over 100 years of rich history and strongly positioned as a local bank with regional and international expertise, a career with our family offers the opportunity to be part of this exciting growth journey, to reset our future and shape our destiny as a proudly African group.

Responsibilities

• To provide advice and support in practice formulation and associated best practice improvement tactics; enabling the provision of specialist information technology security expertise.
• Advanced Penetration Testing
• Conduct manual and automated penetration testing across: Web applications API (REST, GraphQL, SOAP) Mobile applications (iOS & Android) Cloud-native workloads and containerized environment Infrastructure
• Perform black-box and white box testing
• Perform business logic testing
• Validate and exploit findings to demonstrate real business risk
• Conduct threat modeling and attack surface analysis
• AI & Autonomous Pentesting
• Design, operate and optimize AI-Driven autonomous pentesting platforms
• Tune LLM-Based testing agents and attack orchestration workflows
• Validate AI generated findings and reduce false positives
• Reporting & Leadership
• Produce executive level reporting and technical reports
• Present findings to business, engineering and executive stakeholders
• Provide remediation guidance with practical implementation advice
• Mentor junior testers
• Contribute to internal security standards and processes
• Required Skillsets
• Technical Skills
• 5+ years of penetration testing experience
• Deep knowledge of: OWASP Top 10 (Web, API) Business Logic Exploitation Authentication and session management flows SSRF, RCE, injection flaws
• Experience with AI assisted penetration testing tools
• Understanding of LLM-based attacks, prompt injection risks, AI model abuse vectors

Requirements

• Burp Suite (Advance Usage)
• Nmap
• Nessus
• Metasploit
• SAT/DAST tools
• Mobile testing tools (MobSF, Frida, Objection)
• eJPT
• CEH
• OCSP
• Soft Skills
• Excellent problem solving and analytical skills‑solving and analytical skills
• Ability to translate technical risk into business impact
• Strong communication and collaboration abilities
• Ability to work independently as well as contribute effectively within a team
• Bachelor`s Degrees and Advanced Diplomas: Physical, Mathematical, Computer and Life Sciences (Required)

Preferred Qualifications

• Certifications (Preferred)
• AI security (Advantageous)