Job Description

Job Title: Junior Penetration Tester
Job Location: Remote
Job Type: Long-term Contract

Job Summary

Role Purpose

• The Junior Penetration Tester is an execution-focused role responsible for performing authorized security testing activities under defined methodologies and senior supervision. The role emphasizes technical fundamentals, repeatable testing discipline, and high-quality evidence capture in support of client penetration testing engagements.
• This role is designed to build strong delivery hygiene and prepare the individual for independent test ownership at the next grade.

Responsibilities

Delivery Execution

• Execute scoped penetration testing tasks under supervision across:
  • External and internal network assessments
  • Web application and API testing
  • Entry-level cloud security testing (AWS, Azure, GCP)
• Perform reconnaissance, enumeration, vulnerability validation, and limited exploitation in strict accordance with approved Rules of Engagement.
• Validate automated scanner output and eliminate false positives through manual testing.

Evidence & Reporting Support

• Capture defensible evidence including:
  • Reproduction steps
  • Screenshots and command output
  • Clear attack narratives
• Draft technical vulnerability content for reports, including:
  • Root cause analysis
  • Impact explanation
  • Remediation guidance aligned to best practice
• Maintain detailed working notes suitable for audit, peer review, and retesting.

Operational Discipline

• Adhere strictly to ethical testing principles, authorization boundaries, and client confidentiality.
• Follow defined testing playbooks, escalation paths, and quality standards.
• Participate in post-engagement lessons learned and internal quality reviews.

Learning & Development

• Actively develop technical capability through labs, internal training, and supervised client work.
• Progress toward independently executing complete test components.

Required Skills & Experience

Technical Foundation

• Strong understanding of:
  • TCP/IP, DNS,
  • Linux and Windows fundamentals
  • Common vulnerability classes (OWASP Top 10)
• Hands-on familiarity with:
  • Burp Suite
  • Nmap
  • Vulnerability scanners (e.g., Nessus, Qualys)
• Basic scripting capability (Python, Bash, or PowerShell).

Experience

• 2 3 years in penetration testing, security testing, or a closely related security role.
• Demonstrable hands-on exposure via labs, CTFs, bug bounties, or academic projects.

Certifications (Preferred)

• CompTIA Security+
• Burp Suite Certified Practitioner (Associate)
• Progressing toward CREST CRT

Job Tags

Similar Jobs