Junior Penetration Tester

• 
  

  Conduct authorized penetration testing and vulnerability assessments on web applications, networks, and systems.
  
  

  
  


• 
  

  Identify, analyze, and document security vulnerabilities and potential risks.
  
  

  
  


• 
  

  Perform basic security testing using industry-standard tools.
  
  

  
  


• 
  

  Assist in web application, network, and API security assessments.
  
  

  
  


• 
  

  Use tools such as Burp Suite, Nmap, Wireshark, and Metasploit under approved testing scopes.
  
  

  
  


• 
  

  Perform vulnerability scanning and basic manual security testing.
  
  

  
  


• 
  

  Understand and apply OWASP Top 10 security guidelines.
  
  

  
  


• 
  

  Prepare detailed reports describing vulnerabilities, their impact, and remediation recommendations.
  
  

  
  


• 
  

  Collaborate with senior penetration testers and security teams to validate findings.
  
  

  
  


• 
  

  Support retesting activities to verify that identified vulnerabilities have been resolved.
  
  

  
  


• 
  

  Stay updated on cybersecurity threats, attack techniques, and security best practices.
  
  

  
  


• 
  

  Follow ethical hacking guidelines and obtain proper authorization before performing security tests.
  
  

  
  

Requirements

• 
  

  Basic knowledge of penetration testing and ethical hacking.
  
  

  
  


• 
  

  Understanding of networking concepts, including TCP/IP, DNS, HTTP/HTTPS, and ports.
  
  

  
  


• 
  

  Familiarity with Linux and Windows operating systems.
  
  

  
  


• 
  

  Basic knowledge of web application security and common vulnerabilities.
  
  

  
  


• 
  

  Familiarity with tools such as Burp Suite, Nmap, Wireshark, and Metasploit.
  
  

  
  


• 
  

  Basic scripting knowledge in Python, Bash, or PowerShell is an advantage.
  
  

  
  


• 
  

  Understanding of OWASP Top 10 and vulnerability assessment methodologies.
  
  

  
  


• 
  

  Strong analytical, problem-solving, and documentation skills.
  
  

  
  


• 
  

  Willingness to learn new cybersecurity tools and techniques.