Information Security Consultant - Penetration Testing

Our client, a reputable cybersecurity consulting firm, is seeking a highly skilled and experienced Information Security Consultant specializing in penetration testing. This role involves conducting comprehensive security assessments for a diverse range of clients, identifying vulnerabilities, and providing expert recommendations to enhance their security posture. You will be instrumental in simulating real-world cyber-attacks to uncover weaknesses in systems, networks, and applications.

The position is based in our client's office in Centurion, Gauteng , with the flexibility of a hybrid work model. We are looking for a proactive and detail-oriented individual with a passion for offensive security and a proven track record in identifying and exploiting vulnerabilities ethically. This is an exceptional opportunity to work with a variety of industries and technologies, expanding your expertise in the field of cybersecurity.

• Perform comprehensive penetration tests on networks, web applications, mobile applications, and cloud environments.
• Identify, analyze, and document security vulnerabilities and their potential impact.
• Develop detailed penetration testing reports with clear, actionable recommendations for remediation.
• Conduct social engineering assessments and physical security tests as required.
• Research and stay updated on the latest penetration testing techniques, tools, and exploits.
• Collaborate with client IT and security teams to discuss findings and remediation strategies.
• Contribute to the development and refinement of penetration testing methodologies and tools.
• Assist in the development of security awareness training materials based on testing findings.
• Maintain strict confidentiality and ethical standards throughout all engagements.
• Participate in red team exercises to simulate advanced persistent threats.

• Bachelor's degree in Computer Science, Cybersecurity, or a related field; or equivalent practical experience.
• Minimum of 4 years of experience in penetration testing and vulnerability assessment.
• Demonstrated proficiency with a wide range of penetration testing tools (e.g., Metasploit, Burp Suite, Nmap, Wireshark).
• Strong understanding of networking protocols, operating systems (Windows, Linux), and web application security principles (OWASP Top 10).
• Experience in scripting languages (e.g., Python, Bash) for automation of tasks.
• Knowledge of cloud security concepts and testing in AWS, Azure, or GCP environments is a plus.
• Excellent written and verbal communication skills, with the ability to present technical findings clearly to various stakeholders.
• Strong problem-solving and analytical capabilities.
• Relevant certifications such as OSCP, CEH, GPEN, or GWAPT are highly desirable.
• Must be eligible to work in South Africa.

• Our client offers a competitive contract rate, flexible working hours, and the opportunity to work on challenging and diverse projects for leading organizations.
• As a consultant, you'll gain exposure to a wide array of security landscapes and technologies.
• The Centurion, Gauteng office provides a professional and collaborative environment.
• We support continuous learning through access to training resources and industry conferences.
• Employees benefit from a strong professional network within the cybersecurity community.
• This role provides significant autonomy and the chance to build a strong portfolio of successful client engagements.
• Opportunities for contract extension and future project engagements are common for high performers.
• Our client values work-life balance, even within contract roles.