Junior Penetration Tester

We’re looking for a Junior Penetration Tester with 2+ years of experience in web application and infrastructure penetration testing to join our team. If you’re passionate about offensive security, enjoy breaking into systems (legally), and want to level up your skills in a hands-on, real-world environment, we want to hear from you!

Responsibilities:

Conduct web application and infrastructure penetration tests on various client environments.

Identify, exploit, and document security vulnerabilities, following industry standards like OWASP, MITRE ATT&CK.

Prepare detailed reports with clear, actionable remediation steps.

Work with clients to explain findings, risk implications, and recommended mitigations.

Stay updated on latest attack techniques, security tools, and exploit development.

Assist in red team engagements, network security assessments, and external attack surface analysis when needed.

Requirements:

2+ years of hands-on experience in penetration testing (web & infrastructure).

Strong knowledge of OWASP Top 10, common web vulnerabilities, and network security flaws.

Experience with manual exploitation (not just automated scanning).

Ability to write clear, professional pentest reports.

Proficiency in Burp Suite, Nmap, Nessus, Metasploit, BloodHound, Impacket, Mimikatz, and similar tools.

Basic scripting skills in Python, Bash, or PowerShell to automate tasks.

Experience with Active Directory attacks, including Kerberoasting, Pass-the-Hash and Abusing Certificate Templates is an advantage.

Familiarity with cloud security assessments (AWS, Azure, GCP) is a plus.

Relevant certifications such as OSCP, CRTP, or CCT (or equivalent hands-on experience).

Why Join Us?

Work on challenging real-world pentests across different industries.

Fully remote or hybrid work environment (depending on location).

Career growth opportunities in red teaming, exploit development, and cloud security.

Apply now!