Job Title: Senior Penetration Tester

Overview

We are seeking a highly skilled and experienced Senior Penetration Tester with a proven track record in Offensive Security, Penetration Testing, or Red Teaming. The ideal candidate will have a minimum of 7 years’ demonstrable experience, hold relevant offensive security certifications, and preferably have SAP security expertise. This role requires advanced technical skills, meticulous attention to detail, and the ability to identify, exploit, and report on vulnerabilities in complex environments.

Key Responsibilities

• Conduct advanced penetration tests and vulnerability assessments on networks, applications, and systems.

• Perform red team engagements to simulate advanced persistent threats and identify critical security gaps.

• Lead complex security assessments, including SAP Security and SAP Penetration Testing.

• Prepare detailed reports of findings, including actionable remediation steps for identified vulnerabilities.

• Collaborate with security teams, developers, and system owners to implement security improvements.

• Stay up to date with emerging threats, attack vectors, and security testing tools.

• Mentor junior penetration testers and provide expert guidance on methodologies and tools.

• Ensure testing activities comply with legal and regulatory requirements.

Minimum Requirements

• Experience: Minimum 7 years of demonstrable experience in Offensive Security, Penetration Testing, or Red Teaming (experience must be detailed in months and years in CV).

• Certifications:

  • One or more offensive security certifications such as OSCP, OSCE, Certified Red Team Expert (CRTE), Licensed Penetration Tester (LPT) Master, or equivalent.

• Technical Skills:

  • Advanced proficiency with penetration testing tools and frameworks (e.g., Metasploit, Burp Suite, Cobalt Strike, Nmap, Kali Linux).

  • Strong understanding of network protocols, operating systems, and application architectures.

  • Expertise in SAP Security and SAP Penetration Testing is highly advantageous.

Preferred/Advantageous

• Additional cybersecurity certifications such as CISSP, CISM, CRISC, or equivalent.

• Experience in cloud security assessments (AWS, Azure, GCP).

• Strong scripting/programming skills (Python, PowerShell, Bash).

• Experience with threat modeling and attack simulation.

Soft Skills

• Strong analytical and problem-solving abilities.

• Excellent communication skills for technical and non-technical stakeholders.

• Ability to work independently and lead projects.

• Attention to detail and a methodical approach to testing.

Contact information

Yandiswa D