Mid-Level Cyber Security Consultant – (Penetration Testing) – JHB - Onsite

SUMMARY:
-

POSITION INFO:

ENVIRONMENT:

Our client is a specialist cybersecurity organisation providing advanced cybersecurity and digital forensic services to government and commercial clients. They are seeking a Mid-Level Cyber Security Consultant specialising in Penetration Testing to conduct security assessments across web applications, external infrastructure, internal networks, APIs and mobile applications. The successful candidate will have strong hands-on penetration testing experience, particularly in web application security, along with the ability to identify vulnerabilities, assess security risks and produce clear, professional technical reports. The role requires independent working capabilities, effective time management and the ability to communicate findings to both technical and non-technical stakeholders.

DUTIES:

•       Conduct penetration testing and security assessments across web applications, external infrastructure, internal networks, REST APIs and mobile applications.

•       Identify, investigate and validate security vulnerabilities, misconfigurations and potential attack vectors.

•       Perform web application security testing, focusing on authentication, session management, access controls and common web vulnerabilities.

•       Assess applications against recognised security standards and the OWASP Top 10.

•       Conduct network and infrastructure assessments to identify weaknesses in network services, configurations and security controls.

•       Use penetration testing and vulnerability assessment tools to identify, analyse and validate security weaknesses.

•       Develop and execute scripts to support security research, testing activities and attack simulation.

•       Document findings, assess the potential impact of identified vulnerabilities and provide practical remediation recommendations.

•       Prepare clear, structured and professional penetration testing reports for technical and non-technical stakeholders.

•       Communicate assessment findings, security risks and recommendations effectively to clients.

•       Manage assigned engagements independently, ensuring testing activities and deliverables are completed within agreed timelines.

•       Keep up to date with emerging vulnerabilities, attack techniques, security tools and developments in the global threat landscape.

•       Participate in ongoing professional development and specialist cybersecurity communities.

•       Travel when required to support client engagements and the organisation's international operations.

REQUIREMENTS:

•       Approximately 3–5 years of hands-on penetration testing or offensive security experience.

•       Strong practical experience in web application penetration testing.

•       Good understanding of the OWASP Top 10, web authentication, session management, access control and common web application vulnerabilities.

•       Experience testing REST APIs, modern web applications and mobile applications.

•       Familiarity with penetration testing and vulnerability assessment tools, including:

• Burp Suite

• Nmap

• Metasploit

• Nessus or OpenVAS

• Nikto

• Gobuster or FFUF

• SQLmap

•       Very good understanding of networking fundamentals, including TCP/IP, DNS, HTTP/HTTPS, TLS, firewalls and common infrastructure services.

•       Ability to develop scripts in a preferred programming or scripting language to support security research and testing activities.

•       Strong technical report-writing skills, with the ability to document findings and recommendations clearly and professionally.

•       Good command of written and spoken English.

•       Ability to work independently, manage time effectively and meet deadlines.

•       Willingness to travel and possess the necessary travel documentation.

•       Unrestricted legal authorisation to work in the European Union may be advantageous, as the organisation expands its European operations.

ATTRIBUTES:

•       Analytical and investigative: Demonstrates strong analytical thinking and the ability to investigate vulnerabilities and understand potential attack paths.

•       Detail-oriented: Thorough and methodical when conducting security assessments, validating findings and documenting results.

•       Problem-solving: Able to assess complex technical issues and recommend practical security improvements.

•       Strong communicator: Communicates technical findings clearly to both technical and non-technical stakeholders.

•       Professional report writer: Produces accurate, structured and actionable security assessment reports.

•       Self-motivated: Able to manage assignments independently and take ownership of testing engagements.

•       Organised: Prioritises tasks effectively and consistently meets deadlines.

•       Curious and adaptable: Keeps pace with emerging threats, evolving attack techniques and new cybersecurity technologies.

•       Ethical and responsible: Demonstrates professionalism, discretion and integrity when handling sensitive security information.

•       Committed to continuous learning: Receptive to training, mentoring and opportunities to strengthen technical expertise.

•       Flexible: Willing to travel and adapt to changing client requirements and engagement environments.

Additional advantages:

•       Proficiency in additional languages such as French, Portuguese or Greek.

•       Existing unrestricted legal right to work in the European Union.