Junior Penetration Tester

Job Title: Junior Penetration Tester

Location: Remote

Duration: Long Term

Job Summary:

Role Purpose

• The Junior Penetration Tester is an execution-focused role responsible for performing authorized security testing activities under defined methodologies and senior supervision. The role emphasizes technical fundamentals, repeatable testing discipline, and high-quality evidence capture in support of client penetration testing engagements.
• This role is designed to build strong delivery hygiene and prepare the individual for independent test ownership at the next grade.
• Responsibilities
• Delivery Execution
• Execute scoped penetration testing tasks under supervision across:
• External and internal network assessments
• Web application and API testing
• Entry-level cloud security testing (AWS, Azure, Google Cloud Platform)
• Perform reconnaissance, enumeration, vulnerability validation, and limited exploitation in strict accordance with approved Rules of Engagement.
• Validate automated scanner output and eliminate false positives through manual testing.

Evidence & Reporting Support

• Capture defensible evidence including:
• Reproduction steps
• Screenshots and command output
• Clear attack narratives
• Draft technical vulnerability content for reports, including:
• Root cause analysis
• Impact explanation
• Remediation guidance aligned to best practice
• Maintain detailed working notes suitable for audit, peer review, and retesting.
• Operational Discipline
• Adhere strictly to ethical testing principles, authorization boundaries, and client confidentiality.
• Follow defined testing playbooks, escalation paths, and quality standards.
• Participate in post-engagement lessons learned and internal quality reviews.
• Learning & Development
• Actively develop technical capability through labs, internal training, and supervised client work.
• Progress toward independently executing complete test components.

Required Skills & Experience

• Technical Foundation
• Strong understanding of:
• TCP/IP, DNS, HTTP/S
• Linux and Windows fundamentals
• Common vulnerability classes (OWASP Top 10)
• Hands-on familiarity with:
• Burp Suite
• Nmap
• Vulnerability scanners (e.g., Nessus, Qualys)
• Basic scripting capability (Python, Bash, or PowerShell).

Experience

• 2 3 years in penetration testing, security testing, or a closely related security role.
• Demonstrable hands-on exposure via labs, CTFs, bug bounties, or academic projects.

Certifications (Preferred)

• CompTIA Security+
• Burp Suite Certified Practitioner (Associate)
• Progressing toward CREST CRT