Junior Penetration Tester

**Introduction**

**Role Purpose**

**Requirements**:

- Matric is required.
- 1 year experience in similar role.
- At least one year of practical experience in penetration testing.
- An understanding of OWASP, PTES and other penetration testing methodologies
- Knowledge of how modern web apps are designed, developed, and deployed across different platforms. Knowledge of the financial industry and experience with threat and incident response analysis will be advantageous.
- CEH (Certified Ethical Hacker) certification is required.
- OSCP (Offensive Security Certified Professional) or equivalent certification will be advantageous.

**Duties & Responsibilities**
- Participate in determining scope and requirements for tests.
- Lead various client pre-engagement interactions, including scoping activities and proposal drafting.
- Documenting evidence gathered during tests.
- Provide and present well-written and concise technical and non-technical reports to IT (Information Technology) teams and management.
- Provide recommendations on findings to allow teams to correct any issues found, including the security issues uncovered and level of risks as well as advise on methods to fix or lower security risks to systems.
- Perform vulnerability assessments and provide findings with remediation actions.
- Provide input towards improving existing security services, including hardware, software, policies, and procedures.
- Be sensitive to corporate considerations when performing testing (i.e., minimize downtime and loss of employee productivity) by considering the impacts the tests will have on the business.
- Stay updated on the latest malware and security threats.
- Take part in a variety of other information security projects as and when required.

**Competencies**
- Have an attitude that is open to innovative ideas, practices, and methods. The ability to adapt to the requirements of the project, the needs of the business, its environment and people working on it, to ensure a successful outcome, within set timelines.
- Excellent time management and the ability to deal with multiple competing priorities.
- Excellent spoken and written communication to explain your methods to a technical and non-technical audience.
- Good negotiating skills
- Integrity to be trusted with a high level of confidential information.
- Teamwork skills, to support colleagues and share tactics, techniques, and procedures.
- Be able to help business understand the implications of any weaknesses you find.
- Commitment to continuously update your technical knowledge base.