CORE FUNCTIONS INCLUDE:

·        Plan and execute authorised internal penetration tests across MANCOSA’s on-premises, cloud (AWS, Microsoft 365, Azure) and identity environments.

·        Test networks, Active Directory, wireless, remote access and network access controls to identify exploitable weaknesses.

·        Perform web application and API security testing aligned to the OWASP Top 10 and ASVS.

·        Conduct pre-go-live security testing of new systems, integrations and significant changes.

·        Identify privilege-escalation paths, lateral movement opportunities, credential exposure and excessive permissions.

·        Validate and prioritise vulnerability findings, eliminating false positives and confirming exploitability.

·        Act as technical owner of MANCOSA’s continuous external penetration testing service, maintaining the authorised scope of Internet-facing assets.

·        Triage externally identified findings and coordinate remediation with system owners and the service provider.

·        Work with the IT Security, Infrastructure and Systems teams to agree remediation actions, owners and timelines.

·        Retest remediated vulnerabilities and maintain the findings and remediation register.

·        Coordinate and support annual independent penetration tests, including scoping, retesting and remediation tracking.

·        Run purple-team exercises to test the effectiveness of endpoint detection, SOC monitoring and incident response.

·        Map testing activities to the MITRE ATT&CK framework and report detection gaps.

·        Support authorised phishing and social-engineering exercises as part of the user awareness programme.

·        Produce clear penetration test reports with executive summaries, risk ratings, evidence and remediation guidance.

·        Provide security testing metrics for management and governance committee reporting.

·        Maintain testing methodologies, playbooks and tooling aligned to recognised industry standards.

·        Handle all test data and evidence in line with POPIA and MANCOSA’s information security policies.

·        Stay abreast of emerging attack techniques and vulnerabilities, and share knowledge with the IT team.

JOB RELATED KNOWLEDGE AND SKILLS

• Proficiency with offensive security tools such as Burp Suite, BloodHound, Nmap, NetExec, Impacket and Metasploit.
• Knowledge of the MITRE ATT&CK framework, CVSS, OWASP Top 10/ASVS and testing methodologies such as PTES and NIST SP 800-115.
• Strong understanding of Windows, Linux, TCP/IP networking and firewall technologies.
• Scripting ability in Python, PowerShell or Bash.
• Knowledge of POPIA and information security frameworks such as ISO 27001 and NIST.
• Ability to work independently and collaboratively within a team environment.
• Strong report-writing skills and the ability to explain technical risk to non-technical audiences.

Competencies and Skills:

• Excellent interpersonal, oral, and written communication skills.
• High integrity and discretion when handling privileged access and sensitive information.
• Strong analytical, investigative and problem-solving capabilities.
• Methodical approach with strong organisational and prioritisation abilities.

ADDITIONAL REQUIREMENTS:

·        Overtime and after-hours work may be required, as security testing is often scheduled outside business hours.

·        Appointment is subject to satisfactory criminal record, credit and qualification checks.

·        This role is based in Durban, KwaZulu Natal