Cyber Security Consultant Jobs in South Africa
Datafin · Johannesburg
Mid Level
A mid-level cyber security consultant role in Johannesburg offers a penetration tester the chance to run security assessments for a specialist cybersecurity organisation, onsite in Johannesburg.
About the company and the work
The role is advertised by Datafin for a specialist cybersecurity client that provides advanced cybersecurity and digital forensic services to government and commercial clients. The consultant will conduct security assessments across web applications, external infrastructure, internal networks, APIs and mobile applications.
Role details and duties
- Conduct penetration testing and security assessments across web applications, external infrastructure, internal networks, APIs and mobile applications.
- Identify, investigate and validate security vulnerabilities, misconfigurations and potential attack paths.
- Perform web application security testing, focusing on authentication, session management and access control.
- Assess applications against recognised security standards and the OWASP Top 10.
- Conduct network and infrastructure assessments to identify weaknesses in network services and configurations.
- Use penetration testing and vulnerability assessment tools to identify, analyse and validate security issues.
- Develop and execute scripts to support security research, testing activities and attack simulation.
- Document findings, assess the potential impact of vulnerabilities and provide practical recommendations.
- Prepare clear, structured and professional penetration testing reports for technical and non-technical readers.
- Communicate assessment findings, security risks and recommendations effectively to clients.
- Manage assigned engagements independently, ensuring testing activities and deliverables are completed on time.
- Keep up to date with emerging vulnerabilities, attack techniques, security tools and developments.
- Participate in ongoing professional development and specialist cybersecurity communities.
- Travel when required to support client engagements and the organisation’s international operations.
Requirements
- Approximately 3 to 5 years of hands-on penetration testing or offensive security experience.
- Strong practical experience in web application penetration testing.
- Good understanding of the OWASP Top 10, web authentication, session management and access control.
- Experience testing REST APIs, modern web applications and mobile applications.
- Familiarity with penetration testing and vulnerability assessment tools, including Burp Suite, Nmap, Metasploit, Nessus or OpenVAS, Nikto, Gobuster or FFUF, and SQLmap.
- Very good understanding of networking fundamentals, including TCP/IP, DNS, HTTP/HTTPS, TLS and firewalls.
- Ability to develop scripts in a preferred programming or scripting language to support security research.
- Strong technical report-writing skills, with the ability to document findings and recommendations clearly.
- Good command of written and spoken English.
- Ability to work independently, manage time effectively and meet deadlines.
- Willingness to travel and possess the necessary travel documentation.
Additional advantages include proficiency in French, Portuguese or Greek, and an existing unrestricted legal right to work in the European Union.
Where to find and apply safely
This opportunity is listed on CareerJunction, and the Apply button on this page links to the original listing. Apply only through that original listing and be wary of anyone asking for payment to secure a job.
Practical tips
- Show web application and API penetration testing with clear reporting examples.
- Highlight tools such as Burp Suite, Nmap, Metasploit and SQLmap.
- Mention OWASP Top 10 knowledge and networking fundamentals.
- Be ready to discuss independent engagements and client communication.
How the process works
Use the Apply button to reach the original CareerJunction listing, where you can review the full advert and submit your application. The reference for this listing is 2610505.
Important information
This page is informational only. It summarises a third-party job advert and does not guarantee employment. Always confirm the role, pay and working arrangements with the advertiser before accepting any offer.
#SouthAfricaJobs #JobsInSouthAfrica #CyberSecurityJobs #PenetrationTestingJobs
