Senior Penetration Tester - Web & API Security

Reverside; Johannesburg; On-site; ZAR 700,000 - 950,000; Full time

Job summary

Reverside is seeking a Cyber Security Engineer specializing in Penetration Testing to identify vulnerabilities across applications, APIs, and internal systems. The role focuses on proactive security testing, risk identification, and providing actionable remediation recommendations.

The successful candidate will conduct penetration testing across web apps, APIs, and internal systems, collaborate with stakeholders, and contribute to improving testing methodologies within a growing IT services

Qualifications

• 6+ years of professional penetration testing experience.
• Strong web application and API security experience.
• Familiar with Burp Suite or similar tools.
• In-depth knowledge of OWASP Top 10 and common vulnerabilities.
• Ability to read Python, Bash, PowerShell, Java, or PHP.
• Strong analytical, problem-solving, and communication skills.
• Experience managing the full penetration testing lifecycle from scoping to reporting.
• Grade 12 / Matric required.
• Tertiary qualification or relevant IT/Cyber Security certification preferred.

Responsibilities

• Conduct penetration testing across web applications, APIs, and internal systems.
• Participate in scoping sessions and define testing requirements.
• Perform security assessments, particularly across web and API environments.
• Identify, analyse, and document vulnerabilities.
• Provide clear and actionable remediation recommendations.
• Engage with stakeholders to discuss findings and remediation.
• Research and improve security testing methodologies.
• Support senior team members with complex security assessments.

Skills

Penetration Testing

Web App Security

API Security

Burp Suite

OWASP Top 10

Vulnerability Assessment

Security Testing

Python

Bash/PowerShell

Cyber Security

Education

Matric (Grade 12)

Cyber Security Certification

Tools

Burp Suite

Job description

Reverside is seeking a Cyber Security Engineer specializing in Penetration Testing to identify vulnerabilities across applications, APIs, and internal systems. The role focuses on proactive security testing, risk identification, and providing actionable remediation recommendations.

The successful candidate will conduct penetration testing across web apps, APIs, and internal systems, collaborate with stakeholders, and contribute to improving testing methodologies within a growing IT services