Senior Penetration Tester

OmniSec IT Solutions (Pty) Ltd; Johannesburg; On-site; ZAR 600,000 - 800,000; Full time

Job summary

A leading IT security firm in Johannesburg is seeking a Senior Penetration Tester to conduct penetration testing and vulnerability assessments across multiple platforms. The ideal candidate will have over 5 years of experience in this field, strong proficiency with security tools, and excellent communication skills. Relevant certifications are preferred. This is an exciting opportunity to join a dynamic team focused on enhancing security measures.

Qualifications

• 5+ years of hands-on experience in penetration testing and vulnerability assessment.
• Strong expertise in web application, mobile, API, cloud, and infrastructure penetration testing.
• Relevant certifications preferred: OSCP, OSCE, GPEN, GWAPT, CISSP or CEH.

Skills

Penetration testing

Vulnerability assessment

Web application testing

Mobile testing

API testing

Cloud security

Infrastructure penetration testing

Burp Suite

Python

Communication skills

Education

Bachelor's degree in computer science or related field

Tools

Burp Suite

Nmap

Nessus

Metasploit

Kali Linux

Wireshark

Job description

OmniSec IT Solutions is looking for Senior Penetration Tester role.

Job Description

Required Skills & Experience

• Bachelor's degree in computer science, Information Security, or related field (or equivalent experience).
• 5+ years of hands-on experience in penetration testing and vulnerability assessment of IT systems.
• Strong expertise in web application, mobile, API, cloud, and infrastructure penetration testing.
• Proficiency with tools such as Burp Suite, Nmap, Nessus, Metasploit, Kali Linux, Wireshark, and others.
• Experience with secure code review, threat modeling, and business logic testing.
• Familiarity with scripting and automation (Python, PowerShell, Bash, etc.).
• In-depth knowledge of security standards and frameworks (OWASP, SANS, NIST, PCI DSS, ISO 27001).
• Excellent written and verbal communication skills, including report writing and presentation.
• Relevant certifications preferred: OSCP, OSCE, GPEN, GWAPT, CISSP CEH, or equivalent.

Desirable Attributes

• Experience in red teaming, purple teaming, or adversary simulation.
• Knowledge of DevSecOps and CI/CD pipeline security.
• Ability to work independently and as part of a global team.
• Strong analytical and problem-solving skills.
• Commitment to continuous learning and professional development.