Cape Town City Centre: Junior Penetration Tester

Responsibilities Perform scoped vulnerability validation and security checks across: Windows and Linux endpoints/servers Active Directory basics (identity, authentication, common misconfigurations) Network services and exposures (SMB, RDP, SSH, HTTP/S, DNS, etc.) Perimeter and segmentation observations (where applicable) Use established tooling and playbooks to: Enumerate assets and services Validate findings (reduce false positives) Identify weak configurations and common attack paths Assist with internal quality control: Evidence gathering (screenshots, command output, logs) Reproducibility steps Risk ratings aligned to our reporting standard Reporting & Client Delivery Draft assessment reports including: Executive summary (simple and accurate) Technical findings with evidence and impact Prioritised remediation recommendations Participate in internal walkthroughs and client readouts (as confidence grows) Skills & Experience Solid foundational understanding of: TCP/IP networking, ports/services, routing/firewalls (basic) Windows and Linux fundamentals (users, permissions, services, logs) Security concepts: least privilege, authentication, patching, segmentation Comfortable working in a terminal (Linux basic PowerShell) Ability to follow a testing methodology and document work clearly Professional communication: can explain technical issues simply and accurately Integrity and responsibility: understands sensitivity of client environments and data It would be advantageous to have: Exposure to common security tools (any of): Nmap, Nessus/OpenVAS, Burp Suite, Metasploit (basic), BloodHound (intro), Wireshark Home lab experience (AD lab, Hack The Box / TryHackMe / VulnHub) Basic scripting (Python/Bash/PowerShell) for automation and repeatability Familiarity with OWASP Top 10 or cloud fundamentals (AWS/Azure) Strong attention to detail (testing evidence must be reproducible) Calm, methodical approach under guidance Qualifications Relevant diploma/degree or demonstrable equivalent practical experience (labs, portfolio, write-ups) Preferred qualifications: CEH (or studying toward it) eJPT / PNPT / Security / Network (any of these beneficial) Strong intention and readiness to pursue OSCP within a defined timeframe Willingness to learn continuously and accept feedback