Lead Penetration Tester - Application Security

Our client, a rapidly growing technology firm in Cape Town
, is seeking an experienced and motivated Lead Penetration Tester to spearhead their application security initiatives. This critical role will involve conducting in-depth security assessments of web applications, mobile apps, and APIs to identify vulnerabilities and ensure the robustness of our client's software products. The successful candidate will lead a team of security professionals, driving the strategy and execution of penetration testing engagements.

This is an on-site position based in the vibrant city of Cape Town
, Western Cape
, allowing for close collaboration with development and security teams. You will be pivotal in maintaining the security integrity of our client's digital offerings.

• Lead and execute comprehensive penetration tests on web applications, APIs, and mobile platforms.
• Identify, assess, and document vulnerabilities, providing detailed remediation recommendations.
• Develop and maintain advanced testing methodologies and tools.
• Mentor and guide junior penetration testers, fostering their technical growth.
• Collaborate with development teams to integrate security into the Software Development Life Cycle (SDLC).
• Perform security code reviews and vulnerability analysis.
• Stay current with emerging threats, vulnerabilities, and penetration testing techniques.
• Communicate findings and recommendations clearly to technical and non-technical stakeholders.
• Contribute to the development of security policies and procedures.

• Bachelor's degree in Computer Science, Cybersecurity, or a related field, or equivalent work experience.
• Minimum of 7 years of experience in penetration testing, with a strong emphasis on application security.
• Proven expertise in web application security testing, including OWASP Top 10 vulnerabilities.
• Proficiency in using penetration testing tools such as Burp Suite, Metasploit, Nmap, and Kali Linux.
• Experience with scripting languages (e.g., Python, Bash) for automation.
• Strong understanding of secure coding principles and SDLC.
• Excellent analytical, reporting, and communication skills.
• Ability to lead and mentor a team effectively.
• Relevant certifications such as OSCP, CISSP, or GWAPT are highly desirable.
• Must be able to work full-time on-site in Cape Town
  .

Our client offers a highly competitive salary, excellent health and retirement benefits, and generous paid time off. Employees have access to state-of-the-art security tools and opportunities for continuous learning and professional development. Working in the scenic Cape Town offers a unique lifestyle advantage. Join a forward-thinking company committed to maintaining the highest standards of application security.