Ethical Hacker / Penetration Tester (5 Positions) at Sasso Consulting, Centurion
Sasso Consulting · Centurion, Gauteng
Overview
Sasso Consulting is hiring 5 experienced Ethical Hackers for a hands-on enterprise cybersecurity role in Centurion, Gauteng. You will conduct authorised penetration tests on networks, web apps, APIs and cloud environments for real clients. This is a technical position for someone with 3 to 5 years of practical pentesting experience, not just monitoring or scanning. If you can find and safely exploit vulnerabilities, this could be your next move.
About the role
This is your chance to join a dynamic enterprise cybersecurity environment where your penetration testing skills will be put to real use. You will work as part of a technical team of 5 Ethical Hackers based in Centurion, Gauteng.
What you can expect to do:
- Perform internal and external network penetration tests for client organisations.
- Identify, validate and safely exploit security vulnerabilities in web applications, APIs, servers and cloud environments.
- Assess Active Directory, authentication controls and privileged access security to find attack paths.
- Use tools like Kali Linux, Burp Suite, Nmap, Metasploit, Nessus and Wireshark to evaluate security controls.
- Take part in authorised Red Team exercises and security simulations.
- Write detailed penetration testing reports with clear remediation recommendations.
- Retest vulnerabilities and verify that corrective actions actually work.
Application note: This role is based in Centurion, Gauteng. Sasso Consulting has not specified application instructions, so apply through the PNet portal using the original listing.
Requirements
- Relevant IT, Computer Science, Cybersecurity or Information Security qualification.
- 3 to 5 years of hands-on penetration testing or ethical hacking experience.
- Must show practical penetration testing experience. SOC monitoring, general IT security or vulnerability scanning alone is not sufficient.
- Proven experience conducting penetration tests within enterprise environments.
- Strong knowledge of Windows, Linux, networking and Active Directory.
- Practical experience with tools such as Kali Linux, Burp Suite, Nmap, Metasploit, Nessus and Wireshark.
- Experience with OWASP Top 10, web application security and API testing.
- Knowledge of vulnerability exploitation, risk assessment and remediation.
- Scripting experience in Python, PowerShell or Bash is advantageous.
- Cloud penetration testing experience is advantageous.
- Certifications such as OSCP, CEH, GPEN, CREST or CompTIA PenTest+ are advantageous.
- Strong technical reporting, analytical and problem solving skills.
Responsibilities
- Conduct internal and external network penetration testing.
- Identify, validate and safely exploit security vulnerabilities.
- Perform security assessments on web applications, APIs, servers and cloud environments.
- Assess Active Directory, authentication controls and privileged access security.
- Identify potential attack paths, privilege escalation and lateral movement risks.
- Utilise ethical hacking tools to evaluate enterprise security controls.
- Participate in authorised Red Team and security simulation exercises.
- Prepare detailed penetration testing reports with remediation recommendations.
- Conduct vulnerability retesting and verify corrective actions.
- Ensure all testing follows approved security standards and ethical guidelines.
Job details
- Organisation
- Sasso Consulting
- Location
- Centurion, Gauteng
- Job type
- Full time
- Experience level
- Mid (3+ years)
- Education
- Diploma
- Category
- IT & Software Development
- Application Method
- Apply online
Success Guide
Hello there. This Ethical Hacker role at Sasso Consulting is a real technical opportunity for someone who has already spent a few years in penetration testing. The listing is very clear: they do not want just SOC analysts or vulnerability scanning experience. They want someone who has actually done hands-on pentesting in enterprise environments. When you apply, make sure your CV highlights specific projects where you found and exploited vulnerabilities, not just the tools you used. Mention any reports you wrote and any Active Directory or cloud testing you did. Certifications like OSCP or CEH are a big plus, so put those prominently if you have them. In the interview, expect technical questions about your methodology, how you approach an unknown environment, and how you safely exploit issues. You may also be asked to walk through a past penetration test from start to finish. Take your time, be honest about what you know, and show your passion for security. There are 5 positions available, so the team is growing. If this sounds like you, polish that CV and apply through the PNet listing. Good luck.
How we help you prepare
This employer takes applications on their own website, so you'll submit this one yourself — but SPAAN NOW gets everything ready for you first. Here's how it works:
- Our AI tailors your CV to match this job's keywords and requirements, so it stands out to recruiters and screening systems.
- A custom cover letter is written specifically for this role — no generic templates.
- We gather the documents this job needs: CV, Diploma certificate and Degree certificate. SPAAN NOW pulls these from your profile and packages them together, ready to attach.
- Once your application is prepared, we show you exactly how and where to apply — just follow the link to the employer and submit your ready-made CV, cover letter and documents.
- Mark it as applied under Applications to keep track, and if you're shortlisted, use AI Interview Prep to practise questions commonly asked for roles like this.
We do the hard part — tailoring and gathering everything — so applying yourself only takes a minute.
Spaan Talk
Nobody has said anything yet. Be the first.