Senior Penetration Tester — Web & API Security Expert

Reverside; Johannesburg; On-site; ZAR 900,000 - 1,200,000; Full time

Job summary

Reverside, based in Johannesburg, seeks a Cyber Security Engineer specializing in penetration testing to identify vulnerabilities across applications, APIs, and internal systems.

The role emphasizes proactive security testing, risk identification, and providing actionable remediation recommendations, requiring 6+ years of experience and relevant certifications. OSCP and eWPT are preferred qualifications.

Qualifications

• 6+ years’ professional penetration testing experience.
• Strong web application and API security experience.
• Experience with Burp Suite or similar security testing tools.
• Strong understanding of OWASP Top 10 and common vulnerabilities.
• Ability to read and understand a programming/scripting language such as Python, Bash, PowerShell, Java, or PHP.
• Strong analytical, problem-solving, and communication skills.
• Ability to manage the full penetration testing lifecycle from scoping to reporting.

Responsibilities

• Conduct penetration testing across webapplications, APIs, and internal systems.
• Participate in scoping sessions and definetesting requirements.
• Perform security assessments, particularlyacross web and API environments.
• Identify, analyse, and document vulnerabilities.
• Provide clear and actionable remediationrecommendations.
• Engage with stakeholders to discuss findings andremediation.
• Research and improve security testingmethodologies.
• Support senior team members with complexsecurity assessments.

Skills

Penetration testing

Web application security

API security

OWASP Top 10

Programming languages

Communication skills

Security lifecycle management

Education

Grade 12 / Matric

IT/CyberSecurity certification

Tertiary qualification

Tools

Burp Suite

Job description

Reverside, based in Johannesburg, seeks a Cyber Security Engineer specializing in penetration testing to identify vulnerabilities across applications, APIs, and internal systems.

The role emphasizes proactive security testing, risk identification, and providing actionable remediation recommendations, requiring 6+ years of experience and relevant certifications. OSCP and eWPT are preferred qualifications.