Senior Application Security Lead – Penetration Testing

Placements24; Cape Town; On-site; ZAR 900,000 - 1,300,000; Full time

Benefits offered by this job

Private healthcare

Pension plan

Life insurance

Career advancement opportunities

Access to security tools

Vibrant Cape Town office

Job summary

Placements24 in Cape Town is seeking a Lead Penetration Tester to spearhead application security initiatives. You will lead a team of security professionals, conduct in-depth tests on web apps, APIs, mobile apps and cloud environments, and translate findings into actionable remediation guidance.

You will mentor junior testers, refine testing methodologies, collaborate with development teams to remediate findings, perform SAST/DAST, research threats, and contribute to secure coding practices

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, or related field, or equivalent practical experience.
• 5+ years hands-on penetration testing, with application security specialization.
• Proficiency in identifying and exploiting common web vulnerabilities (OWASP Top 10).
• Experience with Burp Suite, OWASP ZAP, Nmap, Metasploit, etc.
• Cloud security assessments (AWS, Azure, GCP) preferred.
• Strong SSDLC understanding and reporting abilities.
• Certs like OSCP, CEH, GWAPT advantageous.

Responsibilities

• Lead and conduct penetration tests on web apps, APIs, mobile apps, and cloud environments.
• Develop and refine pen testing methodologies and tools.
• Mentor junior testers and promote continuous learning.
• Collaborate with development teams to remediate findings and provide actionable recommendations.
• Perform security code reviews and SAST/DAST assessments.
• Research threats and communicate risk to stakeholders.
• Generate comprehensive reports detailing vulnerabilities and remediation steps.
• Support secure coding practices within engineering.

Skills

Penetration testing

Web security

Team leadership

Communication

Education

Bachelor's degree in Cybersecurity/CS

Tools

Burp Suite

OWASP ZAP

Nmap

Metasploit

AWS

Azure

GCP

Job description

Placements24 in Cape Town is seeking a Lead Penetration Tester to spearhead application security initiatives. You will lead a team of security professionals, conduct in-depth tests on web apps, APIs, mobile apps and cloud environments, and translate findings into actionable remediation guidance.

You will mentor junior testers, refine testing methodologies, collaborate with development teams to remediate findings, perform SAST/DAST, research threats, and contribute to secure coding practices