Senior Penetration Tester — Web & API Security

Capitec Bank July, 2026; South Africa; On-site; ZAR 900,000 - 1,300,000; Full time

Job summary

Capitec Bank in South Africa is seeking a Cyber Security Engineer (Pen Tester) to identify vulnerabilities in our web applications, APIs, and internal systems. You will conduct penetration testing and contribute to securing customer data.

The role requires at least 6 years of hands-on testing experience, strong knowledge of OWASP Top 10, and proficiency with Burp Suite. You will communicate findings to technical and non-technical stakeholders and help shape remediation strategies.

Qualifications

• 6+ years of professional penetration testing experience.
• Strong web and API security expertise.
• Experience with Burp Suite or equivalent.
• Ability to script in Python, Bash, PowerShell, Java, or PHP.

Responsibilities

• Perform penetration testing across web apps, APIs, and internal systems.
• Analyze findings and provide remediation recommendations.
• Collaborate with stakeholders to define testing requirements and scoping.

Skills

Penetration testing

Web apps security

API security

Burp Suite

Scripting basics

Clear communication

Education

Grade 12

Cyber security cert

Tools

Burp Suite

OWASP Top 10

Job description

Capitec Bank in South Africa is seeking a Cyber Security Engineer (Pen Tester) to identify vulnerabilities in our web applications, APIs, and internal systems. You will conduct penetration testing and contribute to securing customer data.

The role requires at least 6 years of hands-on testing experience, strong knowledge of OWASP Top 10, and proficiency with Burp Suite. You will communicate findings to technical and non-technical stakeholders and help shape remediation strategies.