Science, Technology, Engineering & Mathematics (STEM)
Penetration Tester / Ethical Hacker
Security vulnerability testing
What this life looks like
You hack systems legally to make them stronger. Penetration Testers are hired by organisations to attack their own systems, find vulnerabilities before real attackers do, and report their findings so defences can be improved. It is one of the most exciting and dynamic careers in technology.
What she actually does
You receive permission from an organisation to attempt to break into their systems using the same tools and techniques real hackers use. You test web applications, networks, mobile apps, and physical security. You document every vulnerability you find, assess its severity, and write a clear report with recommendations for fixing each issue.
Where you can work
| Sector | Places in Africa |
|---|---|
| Cybersecurity Consulting | Serianu (Kenya), Secutel Technologies, African InfoSec firms serving corporate clients |
| Banks & Financial Services | In-house red teams at Standard Bank, First National Bank, Equity Bank |
| Telecoms Red Teams | MTN, Safaricom, Vodacom — internal penetration testing teams |
| Bug Bounties & Freelance | HackerOne, Bugcrowd, Intigriti platforms — independent security research |
Why it matters in Africa
As African businesses digitise, cybersecurity vulnerabilities are multiplying faster than defences are built. Penetration testers who can identify and help fix these weaknesses before criminal hackers exploit them are in growing demand across the continent's banking, telecoms, and government sectors.
Your pathway in
- Study Computer Science or Cybersecurity at university, or pursue self-study through TryHackMe and Hack The Box
- Obtain foundational certifications: CompTIA Security+ and Network+ first, then CEH or OSCP
- The OSCP (Offensive Security Certified Professional) is the gold standard for penetration testers
- Practise legally on intentionally vulnerable systems — never test systems you do not have permission to test
- Participate in bug bounty programmes on platforms such as HackerOne and Bugcrowd to gain real experience
Skills you will need
- Network and web application hacking techniques
- Knowledge of attack tools (Metasploit, Burp Suite, Nmap)
- Report writing
- Programming skills (Python, Bash)
- Ethical mindset and legal awareness
- Continuous self-learning
A woman in this field
Confidence Staveley
Nigeria
Confidence founded CyberSafe Foundation to make cybersecurity skills accessible to all Africans. Before founding CyberSafe, she worked in penetration testing and digital security, developing hands-on skills that now inform the programmes she teaches to thousands of Africans across the continent. She has trained a generation of African ethical hackers and cybersecurity defenders.
Take your first step
- Start the free Jr Penetration Tester learning path on TryHackMe.com
- Learn basic networking — understanding how computers communicate is essential for ethical hacking
- Study for CompTIA Security+ as your first formal certification
- Look into bug bounty programmes on HackerOne to eventually earn money finding real vulnerabilities
Careers close to this one
- Cybersecurity Analyst
- Network Engineer
- Software Engineer
- Digital Forensics Analyst
- Risk Manager