Junior Penetration Testing Engineer

What you will do

In this vital role has a strong focus on ensuring the organization's infrastructure, applications, and systems are secure from external and internal threats. This role is responsible for conducting authorized security tests on IT infrastructure to evaluate the strength of its systems against potential cyberattacks. A variety of automated tools and manual techniques are leveraged to simulate real-world attacks. The penetration tester then works with the organization to prioritize, remediate and report on identified issues, strengthening the overall security posture.

Roles & Responsibilities:

• Assist in penetration testing and security assessments under the supervision of senior engineers.
• Document findings, providing clear and actionable remediation recommendations.
• Identify and report vulnerabilities in applications, networks, cloud environments, and infrastructure.
• Perform hands-on exploitation techniques to validate security weaknesses.
• Use automated security tools (e.g., Burp Suite, OWASP ZAP, Metasploit, Nmap) and manual testing techniques to identify vulnerabilities.
• Research emerging cybersecurity threats and contribute to the improvement of penetration testing methodologies.
• Collaborate with development and security teams to implement secure coding practices and security best practices.
• Participate in adversarial simulations, red team and purple team exercises as part of security assessments.
• Support security compliance efforts aligned with industry frameworks (e.g., NIST, ISO 27001, PCI-DSS).
• Continuously learn and improve technical skills in ethical hacking, scripting, and exploit development.

What we expect of you

Masters degree and 1 to 3 years of experience in Cybersecurity or information security operations OR

Bachelors degree and 3 to 5 years of experience in Cybersecurity or information security operations OR

Diploma and 7 to 9 years of experience in Cybersecurity or information security operations

Must-Have Skills:

• Basic knowledge of penetration testing methodologies (e.g., PTES, OWASP Testing Guide).

• Understanding of network application security, application security, and cloud security.

• Familiarity with OWASP Top 10, SANS Top 25, and common attack techniques.

• Experience using security tools such as Burp Suite, Nmap, OWASP ZAP, and Metasploit.

• Basic proficiency in scripting and automation (e.g., Python, Bash, PowerShell).

Preferred Qualifications:

Good-to-Have Skills:

• Experience with threat intelligence and adversary simulation.
• Basic knowledge of secure coding practices and defensive security measures.
• Interest in red teaming, social engineering, and cloud security testing.
• Preferred: eJPT (Junior Penetration Tester)

Soft Skills:

• Curiosity & Continuous Learning Passion for cybersecurity research and ethical hacking.
• Analytical Thinking Ability to identify patterns and security weaknesses.
• Communication Skills Ability to document findings and present them effectively.
• Collaboration & Teamwork Works well in a team-oriented environment, learning from senior testers.
• Attention to Detail Precision in identifying vulnerabilities and reporting them clearly.
• Problem-Solving Mindset Ability to analyze and troubleshoot security risks effectively.