Junior Penetration Tester (JHB)

eCOGRAJohannesburg, GautengOn-siteFull-timeJunior, 1–2 yearsListed 1 day ago

Apply now

About this role

eCOGRA is looking for a motivated and technically curious Junior Penetration Tester to join our team. This is an opportunity to apply your cybersecurity knowledge in a practical environment, gain exposure to real-world vulnerability assessments and penetration testing engagements, and develop your skills under the guidance of experienced professionals.

You will assist with identifying and validating security vulnerabilities across web applications, APIs, networks, and other technology environments, while contributing to the delivery of high-quality security assessments for our clients.

Key Responsibilities:

- Assist with vulnerability assessments and penetration testing across web applications, APIs, networks, and other systems.

- Identify, manually validate, and document security vulnerabilities, false positives, and potential risks.

- Use penetration testing tools and ethical hacking techniques to support security assessments.

- Prepare technical findings and recommend remediation measures.

- Stay updated on cybersecurity threats, vulnerabilities, industry best practices, and regulatory requirements.

- Participate in practical security labs, collaborate with clients and internal teams, and develop technical skills under the guidance of senior testers.

Minimum Requirements:

- At least 1 year of practical cybersecurity experience , preferably in penetration testing, vulnerability assessment, or application security.

- A relevant certification such as eJPT, PNPT, CPTS, CEH, Security+, or equivalent.

- Good knowledge of networking (TCP/IP, HTTP/HTTPS, DNS), Linux, and Windows.

- Familiarity with tools such as Burp Suite, Nmap, Nessus/Tenable, Metasploit, or Wireshark.

- Basic scripting skills in Python, Bash, PowerShell, or similar.

- Strong analytical, documentation, and communication skills.

Advantageous: Practical experience with Hack The Box, TryHackMe, PortSwigger Academy, CTF challenges, bug bounty programmes, or personal cybersecurity projects.