Mid​/Inter Penetration Tester

Redherd is supporting a search for a Junior to Mid-Level Security Analyst / Penetration Tester to join a respected cybersecurity consultancy delivering offensive security services to organisations across regulated industries.

This role is ideal for someone early in their offensive security career who wants to build strong hands-on experience across web applications, APIs, infrastructure environments, cloud systems, and mobile platforms. You will work alongside experienced penetration testers performing real-world security assessments, identifying vulnerabilities, validating findings, and contributing to clear remediation guidance for clients.

The position offers strong exposure to manual penetration testing techniques beyond automated scanning, including understanding authentication flaws, business logic issues, and common OWASP vulnerabilities. You will also gain experience using industry-standard tooling such as Burp Suite, Nmap, and Kali Linux, while continuing to develop scriptin

Location:

Remote (South Africa) | Ideally Gauteng

Type:
Permanent | Mid Level

Redherd is a specialist cybersecurity recruitment and advisory firm working globally with security consultancies, product companies, and technology organisations. We partner closely with technically strong teams to identify high-impact security talent across offensive security, cloud security, vulnerability research, and threat intelligence.

Our client is a respected cybersecurity consultancy delivering offensive security and cyber threat intelligence services to organisations across regulated industries including financial services, retail, and technology. The team works with clients both locally and internationally and operates with a strong emphasis on technical quality, research, and professional development.

We are seeking a Junior to Mid-Level Security Analyst / Penetration Tester to join a growing offensive security team.

This role is ideal for security professionals early in their offensive security career who want to deepen their hands-on penetration testing skills across modern environments including web applications, APIs, infrastructure, cloud platforms, and mobile applications
.

You will work alongside experienced penetration testers performing real-world security assessments, learning advanced testing techniques, and developing practical exploitation and reporting skills.

The position is well suited to individuals who are curious, technically motivated, and passionate about discovering vulnerabilities and understanding how systems can be broken and secured.

• Assist in performing penetration tests across web applications, APIs, mobile applications, infrastructure environments, and cloud systems
  .
• Identify and validate security vulnerabilities such as authentication flaws, insecure access controls, and common OWASP vulnerabilities
  .
• Support external and internal infrastructure testing including network and Active Directory environments
  .
• Assist with cloud security assessments across platforms such as AWS and Azure.
• Use industry-standard tools and manual testing techniques to identify security weaknesses.

• Document testing activities and maintain clear testing notes and evidence.
• Assist in preparing technical reports with vulnerability descriptions and remediation guidance.
• Work with senior analysts to validate findings and assess business impact.
• Participate in report reviews and quality assurance processes.

• Develop technical skills across manual testing, exploitation techniques, and security tooling
  .
• Participate in internal knowledge sharing,…