Pretoria: Penetration Tester

a) Network Penetration Testing Internal and external network infrastructure Firewalls, routers, switches, and wireless networks VPN configurations and remote access points b) Web Application Testing Public-facing and internal web applications APIs and web services Authentication, session management, and input validation c) System and Server Testing Operating systems (Windows, Linux, etc.) Database servers, file servers, and application servers Patch management and configuration review d) Cloud Security Assessment Cloud-hosted services (e.g., Azure, AWS) Identity and access management in the cloud Data storage and encryption practices e) Social Engineering (Optional) Phishing simulations Employee awareness testing f) Wireless Network Testing Detection of rogue access points Encryption and authentication mechanism