Penetration Tester at Capitec Bank

About the role

To ensure that the business is prepared and skilled to mitigate any cyber security threat through

• Assessing and testing the applications and processes of the Bank.
• Identifying potential areas of weaknesses from a security perspective.
• Playing a key role in developing world class cyber security capabilities within the Bank by means of knowledge transfer, education, training and research.

Minimum Experience

• 3 – 5 years’ experience in cyber security testing
• Risk identification and communication relating to cyber security

Ideal Experience

• 5+ years in cyber security testing
• 2 – 3 years financial services / banking experience 
• Experience with the Agile and DevOps mode 

Minimum Qualification

• Grade 12 National Certificate / Vocational
• Certification in Information Technology Qualifications

Ideal Qualification

• A relevant tertiary qualification in Information Technology or Information Technology - IT Engineering

Minimum Knowledge

• Expertise in manual and automated security testing of infrastructure, networks, and web applications
• Skilled in technical vulnerability assessments (CVE, CVS databases)
• Familiar with industry standards, common network protocols, system architecture, and operating systems
• Knowledge of MITRE Attack Framework, threat landscape, and TTPs
• Strong communication skills for articulating business risks
• Proficient in at least one scripting language (Python, Bash, etc.)
• Experience with pen-testing tools, web, mobile, and cloud app testing
• Understanding of OWASP Top 10, OSINT, and tiered web architectures
• Familiar with networking, firewalls, proxies, and security technologies

Skills

• Communications Skills
• Computer Literacy (MS Word, MS Excel, MS Outlook)
• Attention to Detail
• Analytical Skills
• Problem solving skills