Penetration Testers • Red Teamers • Security Consultants
RedHerd is a specialist cybersecurity recruitment agency focused exclusively on offensive security. We partner with dedicated security consultancies, major financial institutions, and internal enterprise security teams across South Africa to connect skilled practitioners with high-impact roles.
We are establishing a proactive talent pool of offensive security specialists for active briefs and upcoming mandates.
Joining the talent pool allows us to understand your technical strengths, career goals, and compensation expectations in advance. When an engagement matches your profile, you receive priority access, and we will never submit your profile or CV to any client without your explicit consent.
We place offensive security professionals across the career spectrum. Experience ranges serve as general benchmarks rather than strict criteria; demonstrated technical competency and problem-solving ability take precedence over tenure.
Junior to Mid-Level (approx. 2–5 years): Competent in testing web applications, APIs, and network infrastructure under senior technical oversight. Demonstrates rigorous manual validation of findings and produces clear, accurate technical documentation.
Intermediate to Senior Consultant (approx. 3–8 years): Capable of managing end-to-end client engagements independently—from scoping and active testing through to executive reporting, client debriefs, and remediation advisory.
Lead, Principal & Red Team Specialist (5+ years): Proven expertise leading complex adversary simulations, evasion techniques, and red team operations. Experienced in scoping bespoke engagements, mentoring teams, and maintaining technical delivery standards.
We evaluate candidates on practical capability and technical rigour, including:
In-Depth Manual Testing: Moving past automated scanner outputs to exploit complex business logic flaws, chain vulnerabilities, and demonstrate real-world impact.
Breadth of Coverage: Solid technical foundation across web applications, APIs, internal/external network infrastructure, and Active Directory environments.
Actionable Reporting: The ability to translate technical findings into risk-informed reports that provide value to both engineering teams and executive stakeholders.
Tooling & Automation: Practical scripting and tool development using Python, Bash, or PowerShell.
Technical Curiosity: Continuous skill development demonstrated through independent research, lab work, or active community engagement.
Practical problem-solving and sound methodology outweigh paper credentials. However, the following qualifications and public work strengthen your profile:
Practical Certifications: OSCP, OSEP, OSWE, CRTO, CRTP, PNPT, HTB CPTS, or CREST (CRT / CCT).
Specialist Domains: Cloud security assessments (AWS / Azure / GCP), mobile application testing (iOS / Android), secure code review, or adversary emulation frameworks.
Public Work & Profiles: Active Hack The Box / TryHackMe profiles, verified bug bounty submissions, CVE attributions, CTF track records, or open-source offensive tooling on GitHub.
Location: South Africa (primary hubs: Gauteng, Western Cape, KwaZulu-Natal).
Work Models: Hybrid, fully remote, and on-site options available, determined by specific client requirements.
Application Process: Submit your CV, technical summary, or portfolio links (GitHub, Hack The Box, personal technical blog) to register your interest for ongoing review.
GrabJobs is the no1 job portal in South Africa, connecting you to thousands of jobs fast! Find the best jobs in South Africa, apply in 1 click and get a job today!
Copyright © 2026 Grabjobs Pte.Ltd. All Rights Reserved.
Your email job alert is now active!