Cyber Security Engineer (Pen Tester) at Capitec Bank

• At Capitec, we’re building secure, innovative banking solutions and we need skilled professionals who can stay one step ahead of evolving cyber threats. As a Cyber Security Engineer, specialising in Penetration Testing, you’ll play a key role in safeguarding our systems, applications, and customer data by identifying vulnerabilities before they become risks.

What Will You Do?

• Conduct penetration testing across web applications, APIs, and internal systems
• Participate in scoping sessions with internal stakeholders to define testing requirements
• Perform security assessments (primarily across API and web application environments)
• Analyze findings and provide clear, actionable remediation recommendations
• Engage with internal stakeholders to discuss vulnerabilities and resolution
• Support research and continuous improvement of security testing practices
• Collaborate with senior team members on escalations or complex issues

What Are We Looking For

• At least 6 years of experience in penetration testing in a professional work environment
• Strong exposure to web applications and API security
• Experience using tools like Burp Suite or similar
• Understanding of common vulnerabilities (e.g. OWASP Top 10)
• Ability to read and understand at least one scripting/programming language (e.g. Python, Bash, PowerShell, Java, PHP)
• Strong problem-solving skills and attention to detail
• Ability to communicate technical findings clearly to non-technical stakeholders
• Ability to own the full testing lifecycle from scoping through to reporting

Minimum Qualification

• A grade 12 certification 
• Tertiary qualification OR relevant certification in IT / Cyber Security

Ideal Qualifications

• OSCP (Offensive Security Certified Professional)
• EWPT (eLearnSecurity Web Penetration Tester)
• Burp Suite Practitioner Certification

Why Capitec?

• Work on high-impact security challenges within a leading digital bank
• Be part of a collaborative and forward-thinking security team
• Continuous learning and exposure to modern fintech and API ecosystems
• Opportunity to influence how security is embedded across the organisation