Senior Penetration Tester: Web & API Security

reversidesoftwaresolutionspt; Johannesburg; On-site; ZAR 900,000 - 1,200,000; Full time

Job summary

Reverside, an established IT services provider in Johannesburg, is seeking a Cyber Security Engineer specializing in penetration testing to identify vulnerabilities across applications, APIs, and internal systems. The role focuses on proactive security testing, risk identification, and actionable remediation recommendations.

You will conduct tests across web apps, APIs, and internal systems; define testing scope; report findings to stakeholders; and help improve security testing methodologies

Qualifications

• 6+ years of professional penetration testing experience.
• Strong web application and API security experience.
• Experience with Burp Suite or similar security testing tools.
• Strong understanding of OWASP Top 10 and common vulnerabilities.
• Proficiency in Python, Bash, PowerShell, Java, or PHP.

Responsibilities

• Conduct penetration testing across web applications, APIs, and internal systems.
• Participate in scoping sessions and define testing requirements.
• Perform security assessments across web and API environments.
• Identify, analyze, and document vulnerabilities.
• Provide clear and actionable remediation recommendations.
• Engage with stakeholders to discuss findings and remediation.
• Research and improve security testing methodologies.
• Support senior team members with complex security assessments.

Skills

Penetration testing

Web security

API security

Burp Suite

OWASP Top 10

Python

Bash

PowerShell

Java

PHP

Analytical thinking

Communication

Education

Matric (Grade 12)

Cybersecurity certification

Tools

Burp Suite

Job description

Reverside, an established IT services provider in Johannesburg, is seeking a Cyber Security Engineer specializing in penetration testing to identify vulnerabilities across applications, APIs, and internal systems. The role focuses on proactive security testing, risk identification, and actionable remediation recommendations.

You will conduct tests across web apps, APIs, and internal systems; define testing scope; report findings to stakeholders; and help improve security testing methodologies