JOB 20 - Ethical Hacker
Sasso Consulting · Johannesburg, Gauteng
Stop applying one at a time.
JobAlertsZA auto-applies to South African jobs like this one for you, overnight. Upload your CV once — we do the applying.
Start free — we apply for you →Introduction
We are seeking 5 experienced Ethical Hackers to join a dynamic enterprise cybersecurity environment based in Centurion, Gauteng.
The successful candidates will conduct authorised penetration testing, identify exploitable security vulnerabilities and recommend solutions to strengthen organisational security.
This is a hands-on technical role requiring proven penetration testing experience, not general cybersecurity monitoring or vulnerability scanning.
Duties & Responsibilities
Conduct internal and external network penetration testing.
Identify, validate and safely exploit security vulnerabilities.
Perform security assessments on web applications, APIs, servers and cloud environments.
Assess Active Directory, authentication controls and privileged access security.
Identify potential attack paths, privilege escalation and lateral movement risks.
Utilise ethical hacking tools to evaluate enterprise security controls.
Participate in authorised Red Team and security simulation exercises.
Prepare detailed penetration testing reports with remediation recommendations.
Conduct vulnerability retesting and verify corrective actions.
Ensure all testing follows approved security standards and ethical guidelines.
Desired Experience & Qualification
Relevant IT, Computer Science, Cybersecurity or Information Security qualification.
3–5 years' hands-on penetration testing or ethical hacking experience.
Important: Candidates must demonstrate practical penetration testing experience. SOC monitoring, general IT security or vulnerability scanning experience alone will not be sufficient.
Proven experience conducting penetration tests within enterprise environments.
Strong knowledge of Windows, Linux, networking and Active Directory.
Practical experience with tools such as Kali Linux, Burp Suite, Nmap, Metasploit, Nessus and Wireshark .
Experience with OWASP Top 10, web application security and API testing.
Knowledge of vulnerability exploitation, risk assessment and remediation.
Scripting experience in Python, PowerShell or Bash advantageous.
Cloud penetration testing experience advantageous.
Certifications such as OSCP, CEH, GPEN, CREST or CompTIA PenTest+ advantageous.
Strong technical reporting, analytical and problem-solving skills.
Package & Remuneration
Salary: Market-related
Location: Centurion, Gauteng (to be confirmed)
Employment type: 3 Year contract, hybrid
Positions Available: 5
Interested?
Sasso Consulting
Jackie Sasso
Campbell Road, Craigavon, Fourways
2191 Johannesburg
http://sassoconsulting.co.za