Penetration Tester

Overview

One of South Africa’s leading financial institutions is looking for a Penetration Tester to join their team! As a Penetration Tester you will be provided with an opportunity to work on large scale products, systems and infrastructure with the latest technologies, guaranteed to take your career to the next level.

With a big focus on work-life balance their flexible hybrid working environment allows for cross-functional team collaboration and knowledge sharing with 3 office days a week and 2 days remote work. An employee focused approach ensures all employees are provided with equal growth and learning opportunities, employee wellness and multiple benefits.

Experience

• 3 – 5 years’ experience in cyber security testing
• Risk identification and communication relating to cyber security

Knowledge

• Manual and automated security testing of infrastructure, networks, and web applicationsservices
• Technical vulnerability assessments (CVE and CVS database knowledge)
• Best practice technical reviews; using company and industry standards
• Common network protocols, system architecture, and operating systems
• Logical access reviews and audit
• Knowledge of TTP’s/MITRE Attack Framework, threat-attack landscape
• Strong communication and reporting skills, articulate risk to business
• Solution and white-boarding of systems to be assessed
• Ability to readunderstand at least 1 scripting language (e.g. Python, Bash, PowerShell, CPHPJava code)
• Experience in testing web services, webmobile applications, and cloud applications
• Proficiency with pen-testing tools (Security distro’s and intercepting proxy tools)
• Understanding and familiarity of vulnerabilities included in methodologies such as OWASP Top 10 (Web, Mobile, API) and OSSINT
• Understanding of system architectures and platforms (e.g. Windows, Unix, Linux and RedHat)
• Understanding of tiered web applicationservicecloud architectures and related databases (MySQL, MSSQL and Oracle)
• Understanding of networking protocols and architectures, WAF’s, web and reverse-proxies, DLP, e-mail proxy, DAM, firewalls and perimeter security technologies
• End User Infrastructure Service technologies (e.g. Print Management Solutions)

Salt is acting as an Employment Agency in relation to this vacancy.