2-3 years in penetration testing or security testing
Hands-on exposure via labs, CTFs, bug bounties, or academic projects
Proficiency with Burp Suite, Nmap, and vulnerability scanners (e.g., Nessus, Qualys) and basic scripting (Python, Bash, or PowerShell)
Strong understanding of TCP/IP, DNS, HTTP/S, Linux and Windows fundamentals; familiarity with OWASP Top 10
Requirements:
Execute scoped penetration testing tasks under supervision across external/internal networks, web applications/APIs, and entry-level cloud security testing
Perform reconnaissance, enumeration, vulnerability validation, and limited exploitation; validate automated scanner outputs and eliminate false positives
Capture defensible evidence (reproduction steps, screenshots, command outputs) and draft technical vulnerability content (root cause, impact, remediation) for reports; maintain detailed working notes
Adhere to ethical testing principles and client confidentiality; follow defined playbooks, escalation paths, and quality standards; contribute to post-engagement reviews and develop toward independent test ownership
The Junior Penetration Tester is an execution-focused role responsible for performing authorized security testing activities under defined methodologies and senior supervision. The role emphasizes technical fundamentals, repeatable testing discipline, and high-quality evidence capture in support of client penetration testing engagements.
This role is designed to build strong delivery hygiene and prepare the individual for independent test ownership at the next grade.
Responsibilities
Delivery Execution
Execute scoped penetration testing tasks under supervision across:
