Sandton: Pen Tester posted by GMI Advisory

About the Role

GMI Advisory is seeking an experienced Pen Tester to join our team in Sandton, South Africa. As a key member of our security consulting practice, you will be responsible for conducting advanced penetration tests across various platforms to identify vulnerabilities and weaknesses. You will work closely with internal teams and clients to assess, document, and remediate vulnerabilities discovered during testing.

Key Responsibilities

• Penetration Testing: Conduct advanced penetration tests across various platforms, including web applications, networks, and internal/external infrastructures.

• Vulnerability Assessments: Perform thorough vulnerability assessments and scans, identifying attack vectors and providing strategic recommendations.

• Reporting and Documentation: Prepare and deliver clear, concise penetration testing reports that outline technical findings, business impact, and risk mitigation strategies.

• Collaboration: Work closely with internal teams and clients to assess, document, and remediate vulnerabilities discovered during testing.

• Research & Development: Stay up-to-date on emerging security trends, vulnerabilities, attack methods, and penetration testing tools. Contribute to developing internal methodologies and best practices.

• Client Engagement: Effectively communicate penetration testing results to clients, providing insights into risk levels, and actionable next steps for remediation.

• Security Awareness: Mentor junior staff and share knowledge to foster a collaborative and continuous improvement culture within the team.

Requirements

• Experience: 3-5 years in penetration testing or security analysis, ideally in a consulting environment.

• Technical Skills:

• Hands-on experience with penetration testing tools such as Burp Suite, Kali Linux, Metasploit, Nessus, and Nmap.

• Strong understanding of web application security (OWASP Top 10, SQL Injection, Cross-Site Scripting, etc.).

• Expertise in network security, firewalls, IDS/IPS, VPNs, and security monitoring tools.

• Proficient in scripting languages (Python, Bash, etc.) for automation and exploit development.

• Familiarity with cloud environments (AWS, Azure, GCP) and securing cloud systems is a plus.

Qualifications

• Offensive Security Certified Professional (OSCP)

• eLearnSecurity Certified Professional Penetration Tester (eJPT, eCPPT)

• Altered Security (CRTP, CARTP, CRTE)

• Practical Network Penetration Tester (PJPT, PNPT)

Salary & Benefits

Not specified.