Senior Cyber Security Assurance Specialist

About the role

We are looking for a Senior Specialist in Cyber Security Assurance to lead the Security and Privacy by Design Assurance processes for our projects in Midrand. The role combines hands‑on penetration testing with strategic security architecture and risk management.

Key responsibilities

• Manage the Security and Privacy by Design Assurance (SPDA) processes.
• Ensure all projects follow security‑by‑design principles and mitigate privacy and security risks from design through implementation.
• Conduct internal and external penetration tests on infrastructure, web applications, APIs, and network systems.
• Assess security of new and existing systems, products, and services for compliance with policies, industry standards, and best practices.
• Safely exploit vulnerabilities to determine risks of unauthorized access or data compromise.
• Perform automated and manual testing to evaluate system resilience against attack vectors.
• Architect and design cybersecurity solutions that meet security, performance, and scalability requirements.
• Collaborate with IT teams to ensure secure integration of new systems and services.
• Implement threat modeling and risk assessments during the design phase.
• Review technology projects to close Material, Procedural, and Administrative (MPA) risks.
• Stay current with emerging threats, attack techniques, and mitigation strategies.
• Research and introduce innovative cybersecurity technologies and methodologies.
• Share knowledge, provide training, and mentor members of the cybersecurity team.

Required profile

• Minimum 5 years of experience in penetration testing or ethical hacking.
• Strong analytical and problem‑solving abilities.
• Relevant certifications strongly preferred (OSCP, CEH, CISSP, CISA).

Required skills

• Kali Linux, Burp Suite, Metasploit, Nessus
• Network security, web application security, cloud security, mobile application security
• Python, Bash, Ruby, PowerShell, JavaScript
• TCP/IP, DNS, HTTP/S, SSL/TLS protocols
• SQL injection, XSS, CSRF, buffer overflow attack techniques