Junior Penetration Tester

Description:

The Junior Penetration Tester will conduct the assessment of client systems, applications, and cloud environments for security vulnerabilities, following established methodologies and best practices.

Day-to-day tasks include conducting penetration tests, threat modeling, documenting findings, and preparing clear reports for technical and non-technical stakeholders.

The role involves researching emerging vulnerabilities and tools, contributing to secure configuration and hardening recommendations, and collaborating with senior consultants on client engagements.

The Junior Penetration Tester will also help maintain testing labs, follow compliance and quality standards, and participate in continuous learning to develop advanced cyber security skills.

Qualifications

• Foundational penetration testing skills, including basic vulnerability assessment, exploitation techniques, and familiarity with common tools (e.g., Nmap, Burp Suite, Metasploit, Wireshark).
• Understanding of networks, operating systems (Linux/Windows), and web application architectures, including authentication, APIs, and common security controls.
• Knowledge of cloud security concepts (AWS, Azure, or other major cloud platforms) and interest in securing cloud-native environments.
• Ability to write clear technical documentation and reports, explaining risks and remediation steps to both technical and business audiences.
• Strong analytical, problem-solving, and research skills, with attention to detail and a methodical approach to testing.
• Comfort working remotely, managing time effectively, and collaborating via online tools with geographically distributed teams and clients.
• Relevant certifications or progress toward them (e.g., CompTIA Security+, eJPT, OSCP, CREST-related pathways) are beneficial but not mandatory.
• Degree, diploma, or equivalent experience in cyber security, computer science, information technology, or a related field is advantageous.