Senior Specialist – Cyber Security Assurance

Jordan Human Resources; Midrand; On-site; ZAR 700,000 - 1,100,000; Full time

Job summary

Jordan Human Resources is seeking an experienced penetration tester to lead security assessments across the company. You will ensure security-by-design principles are embedded from design to deployment and drive SPDA processes to mitigate risks early.

The role requires hands-on testing of infrastructure, web apps, APIs and networks, plus threat modeling, risk assessments, and collaboration with IT teams to secure integrations.

Qualifications

• Minimum of 5 years in penetration testing or ethical hacking.
• Preferred certifications: OSCP, CEH, CISSP, CISA.
• Proficient with Kali Linux, Burp Suite, Metasploit, Nessus.
• Strong knowledge of network, web, cloud, and mobile security.

Responsibilities

• Manage SPDA processes and ensure security-by-design across projects.
• Conduct penetration tests on infrastructure, web apps, APIs, and networks.
• Assess security of systems for policy and standard compliance.
• Exploit vulnerabilities safely to assess risk of access or data compromise.
• Perform automated and manual tests to evaluate resilience against attacks.
• Design cyber security architectures for performance and scalability.
• Collaborate with IT teams to secure integrations.
• Implement threat modeling and risk assessments in design phase.
• Provide security assessments to mitigate MPA risks early.
• Stay updated on threats and mitigation strategies.

Skills

Pentest experience

Python

Network security

Web app security

Cloud security

Mobile security

Education

OSCP

CEH

CISSP

CISA

Tools

Kali Linux

Burp Suite

Metasploit

Nessus

Job description

Responsible for:

• Manage the Security and Privacy by Design Assurance (SPDA) processes
• Ensure that all projects follow the security-by-design principles, and that privacy and security risks are mitigated from the design phase to implementation.
• Conduct internal and external penetration tests on the company’s infrastructure, web applications, APIs, and network systems to identify vulnerabilities.
• Assess the security of new and existing systems, products, and services to ensure compliance with company security policies, industry standards, and best practices.
• Safely exploit vulnerabilities to determine the risks of unauthorized access or data compromise.
• Conduct both automated and manual tests to evaluate the resilience of systems against various attack vectors.
• Architect and design cybersecurity systems in line with industry best practices to ensure security, performance, and scalability.
• Collaborate with IT teams to ensure secure integration of new systems and services and that they comply with cybersecurity requirements.
• Implement threat modeling and risk assessments in the design phase of security systems and software.
• Review and provide security assessments of company technology projects to close any MPA risks (Material, Procedural, and Administrative), ensuring that risks are mitigated early.
• Ensure that all projects are designed, executed, and delivered with the required security baselines in mind.
• Stay up-to‑date with the latest security trends, attack techniques, and mitigation strategies to ensure the organization remains ahead of emerging threats.
• Research and implement innovative cybersecurity technologies and methodologies to improve overall defense posture.
• Participate in knowledge sharing, training, and mentoring activities within the cybersecurity team to foster a culture of continuous learning and improvement.

Key Skills and Qualifications

• Experience: Minimum of 5 years in penetration testing or ethical hacking.
• Certifications: Strongly preferred certifications like OSCP (Offensive Security Certified Professional), CEH (Certified Ethical Hacker), CISSP (Certified Information Systems Security Professional), CISA (Certified Information Systems Auditor).
• Technical Skills:
  • Proficiency in penetration testing tools such as Kali Linux, Burp Suite, Metasploit, Nessus, etc.
  • Strong knowledge of network security, web application security, cloud security, and mobile application security.
  • Soft Skills:
    • Familiarity with programming/scripting languages like Python, Bash, Ruby, PowerShell, or JavaScript.