{"id":3661425,"url":"https://alion.io/job/datafin-mid-level-cyber-security-consultant-penetration-testing-jhb-onsite","title":"Mid-Level Cyber Security Consultant - (Penetration Testing) - JHB - Onsite","company":{"id":4497034,"name":"Datafin","domain":null,"url":"https://alion.io/company/datafin","size_band":null,"is_staffing_agency":true,"employer_type":"agency","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Johannesburg, South Africa"],"countries":["ZA"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Burp Suite","optional":false},{"name":"DNS","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Rest API","optional":false},{"name":"TCP/IP","optional":false}],"status":"live","first_seen_at":"2026-10-27T13:52:39Z","employer_posted_date":null,"last_verified_at":"2026-10-27T13:52:39Z","board_verified":false,"closed_at":null,"days_open":15,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":15},"description":"ENVIRONMENT:\n\nOur client is a specialist cybersecurity organisation providing advanced cybersecurity and digital forensic services to government and commercial clients. They are seeking a Mid-Level Cyber Security Consultant specialising in Penetration Testing to conduct security assessments across web applications, external infrastructure, internal networks, APIs and mobile applications. The successful candidate will have strong hands-on penetration testing experience, particularly in web application security, along with the ability to identify vulnerabilities, assess security risks and produce clear, professional technical reports. The role requires independent working capabilities, effective time management and the ability to communicate findings to both technical and non-technical stakeholders.\n\nDUTIES:\n\nConduct penetration testing and security assessments across web applications, external infrastructure, internal networks, REST APIs and mobile applications.\nIdentify, investigate and validate security vulnerabilities, misconfigurations and potential attack vectors.\nPerform web application security testing, focusing on authentication, session management, access controls and common web vulnerabilities.\nAssess applications against recognised security standards and the OWASP Top 10.\nConduct network and infrastructure assessments to identify weaknesses in network services, configurations and security controls.\nUse penetration testing and vulnerability assessment tools to identify, analyse and validate security weaknesses.\nDevelop and execute scripts to support security research, testing activities and attack simulation.\nDocument findings, assess the potential impact of identified vulnerabilities and provide practical remediation recommendations.\nPrepare clear, structured and professional penetration testing reports for technical and non-technical stakeholders.\nCommunicate assessment findings, security risks and recommendations effectively to clients.\nManage assigned engagements independently, ensuring testing activities and deliverables are completed within agreed timelines.\nKeep up to date with emerging vulnerabilities, attack techniques, security tools and developments in the global threat landscape.\nParticipate in ongoing professional development and specialist cybersecurity communities.\nTravel when required to support client engagements and the organisation's international operations.\n\nREQUIREMENTS:\n\nApproximately 3–5 years of hands-on penetration testing or offensive security experience.\nStrong practical experience in web application penetration testing.\nGood understanding of the OWASP Top 10, web authentication, session management, access control and common web application vulnerabilities.\nExperience testing REST APIs, modern web applications and mobile applications.\nFamiliarity with penetration testing and vulnerability assessment tools, including:\nVery good understanding of networking fundamentals, including TCP/IP, DNS, HTTP/HTTPS, TLS, firewalls and common infrastructure services.\nAbility to develop scripts in a preferred programming or scripting language to support security research and testing activities.\nStrong technical report-writing skills, with the ability to document findings and recommendations clearly and professionally.\nGood command of written and spoken English.\nAbility to work independently, manage time effectively and meet deadlines.\nWillingness to travel and possess the necessary travel documentation.\nUnrestricted legal authorisation to work in the European Union may be advantageous, as the organisation expands its European operations.\n\nBurp Suite\nNmap\nMetasploit\nNessus or OpenVAS\nNikto\nGobuster or FFUF\nSQLmap\n\nATTRIBUTES:\n\nAnalytical and investigative: Demonstrates strong analytical thinking and the ability to investigate vulnerabilities and understand potential attack paths.\nDetail-oriented: Thorough and methodical when conducting security assessments, validating findings and documenting results.\nProblem-solving: Able to assess complex technical issues and recommend practical security improvements.\nStrong communicator: Communicates technical findings clearly to both technical and non-technical stakeholders.\nProfessional report writer: Produces accurate, structured and actionable security assessment reports.\nSelf-motivated: Able to manage assignments independently and take ownership of testing engagements.\nOrganised: Prioritises tasks effectively and consistently meets deadlines.\nCurious and adaptable: Keeps pace with emerging threats, evolving attack techniques and new cybersecurity technologies.\nEthical and responsible: Demonstrates professionalism, discretion and integrity when handling sensitive security information.\nCommitted to continuous learning: Receptive to training, mentoring and opportunities to strengthen technical expertise.\nFlexible: Willing to travel and adapt to changing client requirements and engagement environments.\n\nAdditional advantages:\n\nProficiency in additional languages such as French, Portuguese or Greek.\nExisting unrestricted legal right to work in the European Union.\n\n Desired Skills: \n Mid\n Level\n Cyber","description_format":"text","description_chars":5152,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Continuous learning","Professional development"],"hiring_locations":[{"name":"Germany","iso":"DE","kind":"region"},{"name":"France","iso":"FR","kind":"region"},{"name":"Austria","iso":"AT","kind":"region"},{"name":"Belgium","iso":"BE","kind":"region"},{"name":"Bulgaria","iso":"BG","kind":"region"},{"name":"Croatia","iso":"HR","kind":"region"},{"name":"Cyprus","iso":"CY","kind":"region"},{"name":"Czech Republic","iso":"CZ","kind":"region"},{"name":"Denmark","iso":"DK","kind":"region"},{"name":"Finland","iso":"FI","kind":"region"},{"name":"Hungary","iso":"HU","kind":"region"},{"name":"Ireland","iso":"IE","kind":"region"},{"name":"Italy","iso":"IT","kind":"region"},{"name":"Netherlands","iso":"NL","kind":"region"},{"name":"Poland","iso":"PL","kind":"region"},{"name":"Romania","iso":"RO","kind":"region"},{"name":"Spain","iso":"ES","kind":"region"},{"name":"Sweden","iso":"SE","kind":"region"},{"name":"Estonia","iso":"EE","kind":"region"},{"name":"Greece","iso":"GR","kind":"region"},{"name":"Latvia","iso":"LV","kind":"region"},{"name":"Lithuania","iso":"LT","kind":"region"},{"name":"Luxembourg","iso":"LU","kind":"region"},{"name":"Malta","iso":"MT","kind":"region"},{"name":"Portugal","iso":"PT","kind":"region"},{"name":"Slovakia","iso":"SK","kind":"region"},{"name":"Slovenia","iso":"SI","kind":"region"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Penetration Testing","Information Security","Application Security"],"lifecycle":[{"event":"open","at":"2026-11-03T03:52:00Z"}],"visa":[],"liveness":{"score":3,"band":"cold","label":"Long shot","p_open":0.85,"p_active":0.117,"p_room":0.35,"age_days":14,"expected_fill_days":2,"reasons":["seen:14","agency","velocity","win:tail"],"computed_at":"2026-11-11T05:49:22Z"},"pay":null,"html_url":"https://alion.io/job/datafin-mid-level-cyber-security-consultant-penetration-testing-jhb-onsite","json_url":"https://alion.io/job/datafin-mid-level-cyber-security-consultant-penetration-testing-jhb-onsite.json","meta":{"generated_at":"2026-11-12T02:05:06Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4764,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4497034},"rest":"https://alion.io/mcp/rest/get_company?id=4497034"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdatafin-mid-level-cyber-security-consultant-penetration-testing-jhb-onsite"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdatafin-mid-level-cyber-security-consultant-penetration-testing-jhb-onsite"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdatafin-mid-level-cyber-security-consultant-penetration-testing-jhb-onsite"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/datafin-mid-level-cyber-security-consultant-penetration-testing-jhb-onsite\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdatafin-mid-level-cyber-security-consultant-penetration-testing-jhb-onsite"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3661425}},{"tool":"search_jobs","arguments":{"company":4497034,"detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3661425},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}