About the Role
Our client is looking for a highly experienced Senior Penetration Tester to join their team on a contract basis. This role is crucial for identifying security vulnerabilities within our client's systems and applications before malicious actors can exploit them. You will conduct thorough security assessments, provide detailed reports with actionable recommendations, and work collaboratively with development and IT teams to remediate findings. The ideal candidate possesses deep technical expertise in offensive security techniques and a strong understanding of various attack vectors. This challenging position is based in Richards Bay, KwaZulu-Natal, offering a significant impact on strengthening our client's security defenses.
Key Responsibilities
- Plan, scope, and execute comprehensive penetration tests on networks, applications, and cloud environments.
- Utilize a wide range of tools and techniques to simulate real-world attacks.
- Identify, analyze, and document security vulnerabilities and their potential impact.
- Develop clear, concise, and actionable remediation recommendations for identified vulnerabilities.
- Prepare detailed penetration test reports for technical and executive audiences.
- Collaborate with development and operations teams to ensure timely and effective remediation of security findings.
- Stay current with the latest penetration testing methodologies, tools, and attack vectors.
- Conduct security architecture reviews and provide expert advice on secure design principles.
- Mentor junior penetration testers and contribute to the team's knowledge base.
- Participate in security incident response activities when required.
Requirements
- Bachelor's degree in Computer Science, Cybersecurity, or a related field, or equivalent practical experience.
- Minimum of 5 years of hands-on experience in professional penetration testing.
- Proficiency in utilizing various penetration testing tools (e.g., Metasploit, Burp Suite, Nmap, Wireshark).
- Strong understanding of web application security, network protocols, and operating system internals.
- Experience with scripting languages such as Python, PowerShell, or Ruby for exploit development and automation.
- Knowledge of security frameworks and compliance requirements (e.g., OWASP Top 10, PCI DSS).
- Excellent analytical, problem-solving, and report-writing skills.
- Strong communication and interpersonal skills, with the ability to effectively present findings.
- Relevant certifications such as OSCP, CEH, GWAPT, or CISSP are highly desirable.
- Ability to work independently and manage multiple projects simultaneously.
Benefits
- Competitive hourly rate of 70000 R, commensurate with experience.
- Opportunity to work on diverse and challenging security projects.
- Flexible working arrangements (hybrid model).
- Gain experience with cutting-edge security technologies.
- Professional development opportunities.
- Work in a dynamic team environment located in Richards Bay, KwaZulu-Natal.
- Potential for contract extension based on performance.