Junior Penetration Tester

About the role

You join a small assessment team testing networks, hosts and internal web applications on a fixed engagement calendar. Most of the work is hands-on testing; a real share of it is writing, because a finding that nobody can reproduce does not get fixed. Clearance sponsorship is available for the right candidate.

Responsibilities

• Execute network and application assessments under an agreed scope
• Reproduce and document every finding with clear steps and evidence
• Retest fixes and confirm the issue is actually closed

Requirements

• One to two years of hands-on testing (labs and CTFs count)
• Comfortable with Burp Suite, nmap and a scripting language
• Able to explain an attack path to someone who is not a hacker
• US person, eligible for a security clearance

Skills

• OSCP or equivalent (nice to have)
• Active Directory attack experience (nice to have)