What Penetration Tester Jobs are in South Africa?

• Plan, scope, and execute penetration tests against various targets, including internal and external networks, web applications, APIs, and mobile applications.
• Identify, exploit, and document security vulnerabilities, assessing their potential impact and risk.
• Develop detailed, high-quality penetration test reports that clearly communicate findings, risks, and remediation recommendations to both technical and non-technical stakeholders.
• Conduct social engineering assessments and phishing campaigns to test employee awareness and response.
• Perform vulnerability assessments and security code reviews to identify potential weaknesses.
• Stay current with the latest penetration testing techniques, tools, and emerging threats.
• Collaborate with system administrators and development teams to implement security remediation strategies.
• Participate in security architecture reviews and provide input on secure design principles.
• Maintain knowledge of industry best practices and regulatory requirements related to cybersecurity.

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent work experience.
• Minimum of 4 years of hands-on experience in penetration testing and vulnerability assessment.
• Proficiency with a variety of penetration testing tools and frameworks (e.g., Metasploit, Burp Suite, Nmap, Nessus, OWASP ZAP).
• Strong understanding of network protocols, operating systems (Windows, Linux), web application security, and common vulnerabilities (e.g., OWASP Top 10).
• Demonstrated ability to think like an attacker and creatively discover vulnerabilities.
• Excellent report writing and communication skills, with the ability to articulate technical findings effectively.
• Experience with scripting languages (e.g., Python, Bash) for automating tasks is a plus.
• Relevant certifications such as OSCP, CEH, CISSP, or GPEN are highly preferred.
• Familiarity with cloud security concepts (AWS, Azure, GCP) is advantageous.

Our client is seeking a highly skilled and ethical Senior Penetration Tester to join their cybersecurity team. This role is responsible for simulating cyberattacks to identify vulnerabilities in our client's systems, networks, and applications, providing actionable insights to improve security defenses. You will conduct in-depth testing, document findings meticulously, and communicate risks effectively to both technical and non-technical audiences. This is a contract position with the flexibility of being fully remote, offering an excellent opportunity for experienced professionals seeking challenging engagements. The role requires a deep understanding of various attack vectors and exploit techniques, contributing to the security of clients operating across diverse industries, including those near Stellenbosch, Western Cape, ZA .

• Conduct comprehensive penetration tests on web applications, network infrastructure, APIs, and mobile applications.
• Perform vulnerability assessments and exploit identified security weaknesses.
• Utilize a variety of tools and techniques for reconnaissance, scanning, exploitation, and post-exploitation.
• Develop detailed and accurate reports outlining findings, including risk assessment and remediation recommendations.
• Communicate effectively with clients and internal teams to explain technical vulnerabilities and provide expert advice.
• Stay up-to-date with the latest penetration testing methodologies, tools, and emerging threats.
• Contribute to the development of new testing methodologies and services.
• Maintain strict ethical standards and client confidentiality throughout all engagements.

• Bachelor's degree in Computer Science, Cybersecurity, or a related field, or equivalent hands-on experience.
• Minimum of 5 years of experience in professional penetration testing.
• Proven track record of successfully identifying and exploiting vulnerabilities in various environments.
• Expert knowledge of common attack vectors, web application security (OWASP Top 10), network protocols, and operating systems.
• Proficiency with penetration testing tools such as Metasploit, Burp Suite, Nmap, Nessus, and Kali Linux.
• Strong understanding of secure coding practices and application security principles.
• Excellent report writing and presentation skills.
• Ability to work independently and manage multiple testing engagements simultaneously.
• Relevant certifications like OSCP, CEH, GPEN, or CISSP are highly valued.

• Competitive contract rates, reflecting your expertise.
• Flexible remote working arrangements.
• Opportunity to work with a diverse range of clients and challenging security scenarios.
• Continuous learning and professional development opportunities.
• Gain exposure to cutting-edge security technologies and methodologies.
• Be a key contributor to enhancing the security posture of organizations, supporting those in regions like Stellenbosch, Western Cape, ZA .
• Direct impact on improving cybersecurity across various industries.

Our client, a prominent e-commerce enterprise situated in the vibrant city of Cape Town , is actively recruiting a Lead Penetration Tester with deep expertise in application security. This role is crucial for identifying and mitigating vulnerabilities within our web and mobile applications before they can be exploited by malicious actors. As the Lead, you will guide a team of security professionals, design comprehensive testing strategies, and communicate findings to both technical and non-technical stakeholders. You will be at the forefront of ensuring the security posture of our customer-facing platforms, playing an instrumental role in building trust and maintaining operational integrity. The ideal candidate will possess a strong ethical hacking background and a passion for cutting-edge security practices. This is an opportunity to make a significant impact in a fast-paced, innovative environment within Cape Town .

• Lead and execute comprehensive penetration tests on web applications, mobile applications, APIs, and network infrastructure.
• Develop and refine penetration testing methodologies and frameworks to identify complex vulnerabilities.
• Conduct manual security testing, code reviews, and vulnerability assessments.
• Analyze test results, document findings in detailed reports, and provide actionable recommendations for remediation.
• Collaborate with development teams to integrate security into the Software Development Life Cycle (SDLC).
• Mentor and guide junior penetration testers, fostering their technical and professional growth.
• Stay updated with the latest vulnerability exploits, attack techniques, and security trends.
• Present security findings and recommendations to senior management and technical teams.
• Develop proof-of-concept exploits to demonstrate the impact of identified vulnerabilities.
• Contribute to the development of security awareness training programs.

• Bachelor’s degree in Cybersecurity, Computer Science, or a related discipline.
• A minimum of 7 years of experience in penetration testing and application security.
• Demonstrated expertise in OWASP Top 10 vulnerabilities, SQL injection, XSS, CSRF, and other common web/mobile exploits.
• Proficiency with penetration testing tools such as Burp Suite, Metasploit, Nmap, and Kali Linux.
• Experience with scripting languages (e.g., Python, JavaScript) for security automation and exploit development.
• Strong understanding of secure coding practices and SDLC.
• Relevant certifications like OSCP, OSCE, CISSP, or CEH are highly preferred.
• Excellent analytical, reporting, and communication skills, with the ability to articulate technical risks effectively.
• Proven leadership experience and the ability to manage a team.
• Must be willing to work full-time in our Cape Town office.

Our client offers an attractive remuneration package including a competitive base salary, annual bonus, and a comprehensive medical aid plan. Professional development is strongly encouraged, with support for further certifications and conference attendance. Employees will enjoy a dynamic work environment in a prime Cape Town location, with ample opportunities for career progression within the security domain. This role provides the chance to work with cutting-edge technologies and contribute to the security of a major online platform.

• Conduct comprehensive penetration tests on web applications, networks, APIs, and mobile applications.
• Perform vulnerability assessments and security audits to identify weaknesses.
• Utilize a variety of tools and techniques for penetration testing, including network scanners, vulnerability scanners, and exploit frameworks.
• Develop detailed reports outlining identified vulnerabilities, their potential impact, and recommended remediation steps.
• Work closely with development and operations teams to ensure vulnerabilities are effectively addressed.
• Stay up-to-date with the latest penetration testing methodologies, tools, and threat intelligence.
• Participate in red team exercises and security simulations.
• Contribute to the development and improvement of penetration testing processes and playbooks.
• Provide expert advice on security best practices and secure coding principles.

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• Minimum of 3 years of hands-on experience in penetration testing and vulnerability assessment.
• Proficiency with common penetration testing tools (e.g., Metasploit, Burp Suite, Nmap, OWASP ZAP).
• Strong understanding of network protocols, operating systems, web application security, and common vulnerabilities (e.g., OWASP Top 10).
• Experience in scripting languages (e.g., Python, Bash) for security automation is a plus.
• Excellent analytical and problem-solving skills.
• Strong written and verbal communication skills, with the ability to clearly articulate technical findings.
• Ability to work independently and manage multiple testing engagements simultaneously in a remote setting.
• Relevant certifications such as OSCP, CEH, CISSP, or GPEN are highly valued.

• Competitive salary and performance bonuses.
• Comprehensive medical, dental, and vision coverage.
• Generous vacation policy.
• Fully remote work environment with a home office setup allowance.
• Opportunities for continuous learning, advanced training, and certifications.
• Exposure to diverse and challenging security environments.
• A collaborative and forward-thinking security team.
• Life insurance benefits.

• Planning, executing, and reporting on penetration tests for web applications, networks, APIs, and mobile applications.
• Conducting vulnerability assessments and providing detailed analysis of findings.
• Developing and utilizing custom scripts and tools to automate testing processes.
• Simulating advanced persistent threats (APTs) and other sophisticated attack vectors.
• Providing actionable recommendations for remediation of identified vulnerabilities.
• Collaborating with development and operations teams to integrate security testing into the development lifecycle.
• Staying up-to-date with the latest exploitation techniques, attack vectors, and security trends.
• Documenting test methodologies, findings, and results clearly and concisely.
• Assisting in the development of security best practices and guidelines.
• Participating in red team exercises and security assessments.

• A Bachelor's degree in Computer Science, Cybersecurity, or a related field, or equivalent practical experience.
• Minimum of 3 years of hands-on experience in penetration testing and vulnerability assessment.
• Proven expertise in exploiting common vulnerabilities (e.g., OWASP Top 10, SANS Top 25).
• Proficiency with penetration testing tools such as Metasploit, Burp Suite, Nmap, Wireshark, and Kali Linux.
• Strong understanding of network protocols, operating systems (Windows, Linux), and web technologies.
• Experience with scripting languages like Python, Bash, or PowerShell for security automation.
• Excellent written and verbal communication skills, with the ability to present technical findings to both technical and non-technical audiences.
• Ability to work independently and as part of a team in a hybrid work environment.
• Relevant certifications such as OSCP, CEH, GWAPT, or CISSP are highly preferred.
• Familiarity with cloud environments (AWS, Azure) is a plus.