Senior Penetration Tester - Remote Security Expert

Placements24; Pretoria; Hybrid; ZAR 900,000 - 1,300,000; Full time

Benefits offered by this job

Performance bonuses

Fully remote

Health/Dental/Vision insurance

Professional development allowance

Access to security tools

Job summary

Placements24 seeks a Senior Penetration Tester to join a remote security team. You will proactively identify vulnerabilities in systems, networks and applications through testing and simulated attacks, helping the organization understand weaknesses and implement countermeasures before exploitation.

You will conduct tests on web apps, APIs, networks and mobile apps; develop attack scenarios; perform scans; document findings with remediation steps; advise on secure coding and infrastructure

Qualifications

• 5+ years of professional experience in penetration testing and vulnerability assessment.
• Certifications such as OSCP/CEH/GPEN/GWAPT are highly desirable.
• Strong understanding of networking protocols, OSs (Windows/Linux) and web app security.
• Excellent report-writing skills and ability to explain findings to technical and non-technical audiences.

Responsibilities

• Conduct comprehensive penetration tests on web apps, APIs, networks, and mobile apps.
• Develop and execute custom attack scenarios and exploit techniques.
• Perform vulnerability scanning and analysis, correlating findings from tools and manual testing.
• Document findings in detailed reports with clear remediation steps.
• Collaborate with Dev and Ops teams on secure coding practices and hardening.
• Stay current with latest pentesting methodologies, tools and threats.

Skills

Penetration testing

Vulnerability assessment

Report writing

Threat modeling

Education

OSCP

CEH

GPEN

GWAPT

Tools

Metasploit

Burp Suite

Nmap

Kali Linux

Job description

Placements24 seeks a Senior Penetration Tester to join a remote security team. You will proactively identify vulnerabilities in systems, networks and applications through testing and simulated attacks, helping the organization understand weaknesses and implement countermeasures before exploitation.

You will conduct tests on web apps, APIs, networks and mobile apps; develop attack scenarios; perform scans; document findings with remediation steps; advise on secure coding and infrastructure