Orange Cyberdefense South Africa is the expert cybersecurity business unit of the Orange Group, we provide managed security services, penetration testing and cybersecurity training to organisations around the globe. Orange Cyberdefense South Africa is born from the SensePost team originally founded in Centurion in 2000.

This position is responsible for performing all forms of complex technical security assessments of clients’ information technology systems (including Internet, Intranet, Applications, Hosts, Firewalls, Mobile applications etc.) and related policies and procedures. Communication in both written and verbal forms, including training courses, workshops, and consultations with clients and formal reports. These assessments are conducted on a by-project basis, ranging between one and three weeks per project, and will occasionally be done at the client site, in South Africa, or abroad. This role is also required to conduct on-going research in the IT security arena and regularly assist in the sales process.

Key Responsibilities

• Perform security reviews of architecture and application designs, as well as application source code reviews

• Perform mobile, complex application, infrastructure, cloud, as well as social engineering assessments and penetration testing

• Exploit vulnerabilities to gain access, and expand access to remote systems

• Document technical issues identified during security assessments

• Assist with building, hardening, and maintaining systems used for penetration testing

• Research cutting edge security topics and new attack vectors

• Assist with pre-sales to prospective clients

• Be the core trainer on at least one of the SensePost training course offerings.

• Assist with improvements for SensePost security services, including the continuous enhancement of existing methodology and reporting formats, as well as training collateral

• Communication of findings/innovations internally, to SensePost colleagues (via blog)

• Represent Orange Cyberdefense at international events, forums or training events

• Demonstrate the ability to be an industry expert

Skills & Experience
Qualifications Required

• IT-related degree / certificate or equivalent experience

• One of the industry leading qualifications (OSCP, OSCE, OSCW, OSEE)

Experience / Knowledge Required

• Solid experience in Ethical hacking (at least two years)

• Industry experience working in Dev/Admin/Engineer field

• Industry experience working in Information security field as a penetration tester

• Development and/or source code review experience in C/C++, C#, .NET, PHP, Java, Python, Ruby, etc.

• Strong Unix, Windows and networking security skills

• Familiarity with general application and network security concepts

• Excellent communication skills

• Manual penetration testing experience above and beyond running automated tools

• Experience developing custom scripts or tools used for vulnerability scanning and identification

• Strong foundation in computer networking

• Broad understanding of hosting / cloud environments

• Familiarity with SIEM & Defensive Technologies

• Report writing experience

• Presentation skills

• Understanding of quality management and project management principles

• Development of work packages

Personal Specification

• Urgent desire to learn with a passion for technology

• Action-oriented

• Motivated by being at the forefront of technology, and pushing technology boundaries

• Capacity to concentrate for long periods of time

• Motivated by the thrill of being able to “break” systems

• Willingness to work late when required

• Willingness to travel when required, possibly abroad

• Analytical and critical thinker

• Good written English skills

• Problem-solving skills

• Self-motivation

• Efficient

• Detail-oriented

• The ability to prioritize

• Team player

• Analytical

• Inquisitive

• Evil bit (GCP) (hacker way of looking at complex problems and solving them creatively)

• Active listening

• Trustworthy

• Critical thinking

• Persistence

• Self-control

• Attention to detail