Senior Penetration Tester - Remote, Elite Security Team

Placements24; South Africa; Remote; ZAR 800,000 - 1,200,000; Full time

Benefits offered by this job

Fully remote

Bonuses

Health insurance

Training budget

Global engagements

Job summary

Placements24 is seeking a Senior Penetration Tester to join a fully remote security assessment team. You will conduct in-depth security assessments of web apps, networks, and systems, simulate real‑world attacks, and document findings for technical and non‑technical stakeholders.

The ideal candidate has 5+ years in penetration testing, strong OWASP Top 10 knowledge, and hands‑on use of Metasploit, Burp Suite, Nmap, Nessus, and Kali Linux, with OSCP/GPEN or similar certifications preferred.

Qualifications

• 5+ years of professional penetration testing and offensive security experience.
• Strong knowledge of OWASP Top 10 and exploitation techniques.
• Proficiency with Metasploit, Burp Suite, Nmap, Nessus; Kali Linux.

Responsibilities

• Plan, execute, and document penetration tests across environments.
• Identify and exploit vulnerabilities with measurable impact.
• Develop proof‑of‑concept exploits and testing tools.
• Document testing methodologies, findings, and recommendations clearly.
• Mentor junior testers and share knowledge within the team.

Skills

Penetration testing

Offensive security

Vulnerability assessment

Web app testing

Network testing

Report writing

Communication

Education

Bachelor's degree or equivalent

Tools

Metasploit

Burp Suite

Nmap

Nessus

Kali Linux

Job description

About the Role

Our client is looking for a skilled Senior Penetration Tester to join their fully remote security assessment team. In this role, you will conduct in-depth security assessments of web applications, networks, and systems to identify vulnerabilities and provide actionable recommendations for remediation. You will be responsible for simulating real-world attack scenarios, documenting findings meticulously, and communicating results effectively to both technical and non-technical stakeholders. This position requires a deep understanding of attack vectors, exploitation techniques, and the latest security tools and methodologies. As a remote‑first employee, you will work autonomously and collaboratively with a geographically dispersed team, contributing directly to the security resilience of our client's global operations.

Our client is a cutting‑edge cybersecurity consultancy that operates with a fully remote‑first philosophy. We are seeking an elite Senior Penetration Tester to join our globally distributed team. This role is responsible for conducting comprehensive security assessments of client systems, networks, and applications to identify vulnerabilities and provide actionable remediation guidance. You will utilize your expertise in offensive security techniques to simulate real‑world attacks, helping our clients strengthen their defenses. The ideal candidate is a passionate security researcher with a deep understanding of exploit development, web application security, network protocols, and system internals. This is an exceptional opportunity to work on diverse and challenging projects with a highly skilled, remote team, contributing to the security of a wide range of organizations worldwide.

Key Responsibilities

• Plan, execute, and document penetration tests across various environments (web applications, APIs, networks, mobile applications, cloud infrastructure).
• Identify and exploit security vulnerabilities, demonstrating potential business impact.
• Perform thorough vulnerability analysis and provide detailed, actionable remediation recommendations.
• Develop proof‑of‑concept exploits and custom testing tools.
• Conduct social engineering assessments and red team exercises.
• Stay up‑to‑date with the latest attack vectors, exploitation techniques, and security trends.
• Collaborate with clients to understand their security needs and provide expert advice.
• Contribute to the development of the company's testing methodologies and reporting standards.
• Mentor junior penetration testers and share knowledge within the team.
• Maintain detailed and accurate documentation of all testing activities and findings.

Requirements

• Bachelor's degree in Computer Science, Cybersecurity, or a related technical field, or equivalent practical experience.
• Minimum of 5 years of professional experience in penetration testing and offensive security.
• Demonstrated expertise in web application penetration testing, network penetration testing, and vulnerability assessment.
• Proficiency with penetration testing tools and frameworks (e.g., Metasploit, Burp Suite, Nmap, Nessus).
• Strong understanding of common vulnerabilities (e.g., OWASP Top 10) and their exploitation.
• Experience with scripting languages (e.g., Python, PowerShell) for automation and tool development.
• Knowledge of operating systems (Windows, Linux), networking protocols, and cloud security (AWS, Azure, GCP).
• Excellent report writing skills, with the ability to communicate technical findings to both technical and non‑technical audiences.
• Relevant certifications such as OSCP, OSCE, GPEN, CEH, or CISSP are highly advantageous.
• Strong problem‑solving abilities and a creative, analytical mindset.

Benefits

• Fully remote working environment, providing unparalleled flexibility.
• Highly competitive salary and performance‑based bonuses.
• Comprehensive medical aid, life insurance, and retirement savings plans.
• Generous budget for training, conferences, and certifications.
• Opportunity to work with a world‑class team of security professionals on cutting‑edge projects, making a real difference in protecting our client's diverse global clientele from threats.

About the Role

Our client is actively seeking a highly skilled and ethical Remote Penetration Tester to join their expanding cybersecurity team. This is a fully remote position, allowing you to leverage your expertise from anywhere. You will be responsible for identifying vulnerabilities in our client's systems, applications, and networks through simulated attacks. Your findings will be crucial in helping our client strengthen their security posture and protect against real‑world threats. The ideal candidate possesses a deep understanding of various attack vectors, exploitation techniques, and security tools. You should be adept at documenting findings clearly and providing actionable recommendations for remediation. This role demands a proactive, detail‑oriented individual who is passionate about ethical hacking and continuous learning in the ever‑evolving field of cybersecurity. As a remote contractor, you will have the flexibility to manage your workload while contributing significantly to the security of a leading organization, working entirely from your preferred location.

Key Responsibilities

• Conduct comprehensive penetration tests on web applications, network infrastructure, and APIs.
• Identify security vulnerabilities and exploitable weaknesses using various tools and manual techniques.
• Perform network and system reconnaissance to map attack surfaces.
• Develop and execute proof‑of‑concept exploits to demonstrate the impact of vulnerabilities.
• Document penetration testing methodologies, findings, and recommendations clearly and concisely.
• Collaborate with development and operations teams to ensure timely remediation of identified vulnerabilities.
• Stay up‑to‑date with the latest penetration testing techniques, tools, and threat landscapes.
• Adhere to ethical hacking principles and company security policies.
• Contribute to the development and improvement of the company's penetration testing program.
• Provide expert advice on security best practices to mitigate identified risks.

Requirements

• Proven experience as a Penetration Tester or in a similar offensive security role.
• Strong understanding of common vulnerabilities (e.g., OWASP Top 10) and exploitation techniques.
• Proficiency with penetration testing tools such as Metasploit, Burp Suite, Nmap, and Kali Linux.
• Experience in network security, web application security, and cloud security.
• Excellent analytical and problem‑solving skills.
• Ability to document technical findings and present them to both technical and non‑technical audiences.
• Strong communication and collaboration skills, even in a remote setting.
• Ethical mindset and commitment to confidentiality.
• Relevant certifications such as OSCP, CEH, GPEN, or LPT are highly valued.
• Ability to work independently and manage project deadlines effectively.

Benefits

• Highly competitive salary and performance‑based bonuses.
• Comprehensive health, dental, and vision insurance.
• Generous paid time off and flexible work schedule.
• Home office setup stipend and recurring monthly internet/utility reimbursement.
• Annual budget for training, conferences, and certifications.
• Opportunity to work on diverse and challenging client engagements globally.
• 401(k) or equivalent retirement plan with company match.
• A collaborative and supportive remote team culture.
• Access to cutting‑edge offensive security tools and resources.
• Direct impact on improving the security posture of numerous organizations.