Penetration Tester

🕒 August 20

🇿🇦 South Africa – Remote

💵 R400k - R550k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

🔧 QA Engineer (Quality Assurance)

👻 Ghost score 23%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Cognisys

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2017

🔒 Cybersecurity

📋 Compliance

💼 Consulting

💰 Debt financing on 2023-04

Cybersecurity • Compliance • Consulting

Cognisys is a cybersecurity and compliance consultancy that provides governance, risk and compliance (GRC) services, CREST-accredited penetration testing, and vulnerability management. They act as a security and compliance partner (including vCISO engagements), and are a leading global service partner for Vanta, helping clients accelerate compliance like SOC 2 and ISO 27001. Cognisys operates internationally with multiple regional teams and offices, offers remote and hybrid roles, and emphasizes agile, client-focused delivery for organisations ranging from startups to large enterprises.

📋 Description

• Conduct penetration testing across network, web application, API, mobile application and cloud environments • Simulate real-world attack scenarios to assess clients' resilience against cyber threats • Use automated tools, manual testing and exploitation techniques to identify and validate vulnerabilities • Assess technical security controls and identify potential weaknesses and attack paths • Analyse vulnerabilities and assess their business and security impact • Produce technical reports outlining vulnerabilities, risks and practical remediation recommendations • Communicate complex technical findings to technical and non-technical stakeholders • Present findings and recommendations directly to clients • Collaborate with colleagues to deliver client engagements successfully • Keep up to date with emerging threats, vulnerabilities, tools and offensive security techniques • Contribute to the development and improvement of Cognisys' penetration testing capabilities and methodologies • Manage multiple engagements, priorities and deadlines

🎯 Requirements

• Hands-on experience conducting penetration testing across networks, web applications, APIs, mobile applications or cloud environments • Strong understanding of offensive security methodologies, tools and techniques • Experience using vulnerability scanning tools alongside manual testing and exploitation techniques • Strong grasp of how to assess and break technical controls and identify potential attack paths • Experience identifying, analysing and validating security vulnerabilities • Ability to assess the potential impact and risk associated with identified vulnerabilities • Experience producing high-quality penetration testing reports with clear and practical remediation recommendations • Ability to communicate complex technical findings clearly to both technical and non-technical audiences • Strong written and verbal communication skills • Excellent client engagement skills and confidence presenting technical findings and recommendations • Ability to manage multiple engagements, priorities and deadlines effectively • A proactive approach to problem-solving and continuous learning • Industry-recognised certifications such as CPSA, CRT, OSCP or similar are desirable • Experience testing a broad range of technologies and environments is desirable • Experience working within a cybersecurity consultancy or professional services environment is desirable • Experience presenting penetration testing findings directly to clients is desirable • Knowledge of emerging cybersecurity threats, attack techniques and offensive security tools is desirable • Experience with cloud security assessments across AWS, Azure or GCP is desirable • Experience with API and mobile application security testing is desirable

🏖️ Benefits

• 25 days annual leave per year plus 12 South African public holidays • 1 day of paid leave for your Birthday • Individual healthcare insurance plan • Access to an employee mental health and wellbeing platform • £2,000 annual training budget • Referral bonus of up to £2,000 per successful referral • Fully remote work • Professional growth and development opportunities