Junior Penetration Tester

This is a fully remote position, open to applicants in Texas.

📋 Description

• Execute penetration tests in client environments utilizing both black-box and white-box methodologies for web, network, and mobile targets in accordance with NIST standards

• Oversee assigned engagement tasks and manage workload from the initial scoping phase through to final reporting

• Generate technical reports that detail findings, assess risk context, and provide actionable remediation recommendations

• Participate in security assessments for iOS and Android applications

• Leverage knowledge of security architectures, firewalls, network traffic, and access controls to pinpoint vulnerabilities

• Utilize commercial, government, and custom tools to scan for, identify, and validate security weaknesses

• Investigate and assess new tools, techniques, and technologies while suggesting enhancements for the team

• Present findings to clients and articulate business risks to leadership

• Develop cybersecurity and digital forensics capabilities through mentorship, training, and practical experience aligned with the NICE Framework

• Share expertise, contribute to the enhancement of internal tools and methodologies, and assist in bridging practice skill gaps

• Remain updated on new vulnerabilities, attack methodologies, and industry advancements

• Report directly to the Security Assessments Manager

⛳️ Requirements

• A Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field is preferred but not mandatory; equivalent hands-on experience such as labs, CTFs, internships, or personal projects may be accepted in place of a degree

• Must successfully pass a CJIS Criminal Justice background investigation and maintain CJIS clearance throughout employment

• Foundational understanding of cybersecurity principles, networking, operating systems, and prevalent attack techniques

• Working knowledge of the OWASP Web Security Testing Guide and OWASP Top 10

• Practical experience with web application testing and vulnerability scanning tools like Burp Suite and Tenable

• Basic comprehension of firewalls, network traffic, and access controls

• Capability to produce clear, organized technical documentation

• Strong curiosity, problem-solving abilities, and a commitment to continuous learning

• GWAPT and OSCP certifications are highly preferred; other certifications may also be considered

• Familiarity with mobile application testing tools and assessments for iOS or Android

• Understanding of REST, GraphQL, and SOAP API security testing

• Experience with source code review for white-box testing

• Involvement in CTFs, bug bounty programs, home labs, or platforms such as Hack The Box, TryHackMe, or PortSwigger Web Security Academy

• Basic scripting abilities in Python, Bash, or PowerShell

• Introductory knowledge of cloud security, digital forensics, or reverse engineering

• Experience in presenting technical information or a desire to develop this skill

• Ability to work collaboratively under the guidance of senior team members

🏝️ Benefits

• Competitive salary and performance-based incentives

• Comprehensive health, dental, and vision insurance plans

• Opportunities for professional development and certifications

• Flexible work hours and remote work options

• Supportive and inclusive work environment