Penetration Tester

About the Role

Find vulnerabilities before attackers do. Conduct thorough security assessments of web applications, APIs, mobile apps, and infrastructure for ANED's clients across Africa.

What You'll Do

• ▸ Perform penetration testing on web, mobile, and API targets
• ▸ Conduct network and infrastructure security assessments
• ▸ Write detailed vulnerability reports with remediation guidance
• ▸ Perform social engineering assessments
• ▸ Conduct red team exercises for enterprise clients
• ▸ Research new attack techniques and vulnerabilities
• ▸ Develop custom tools and scripts for testing
• ▸ Present findings to technical and executive stakeholders

What We're Looking For

• ▸ 3+ years penetration testing experience
• ▸ Strong knowledge of web application vulnerabilities
• ▸ Experience with tools (Burp Suite, Metasploit, Nmap, sqlmap)
• ▸ Knowledge of scripting languages (Python, Bash)
• ▸ Understanding of network protocols and infrastructure
• ▸ Experience writing professional security reports
• ▸ OSCP, CEH, or equivalent certification
• ▸ Strong ethical standards and professionalism

Nice to Have

• ▸ Experience testing African fintech or mobile money systems
• ▸ Knowledge of mobile application security
• ▸ Bug bounty program experience
• ▸ Experience with cloud penetration testing