Junior Penetration Tester

About the role

The Junior Penetration Tester will support security assessments across web applications, infrastructure, cloud environments, and other technologies connected to the client network. You will plan and execute tests, map findings to NIST SP 800-53 controls, and help improve the organization’s security posture.

Key responsibilities

• Develop and maintain repeatable security testing methodology, including threat modeling and test case creation.
• Conduct security testing of IT assets, web and mobile applications, cloud implementations, COTS products, and virtual technologies.
• Perform vulnerability, risk, and compliance analyses in line with industry‑proven processes.
• Map test results to NIST SP 800-53 controls and the organization’s security framework.
• Create and maintain automated testing scripts and deliver clear, actionable reports.

Required profile

• 3+ years of experience in information technology, with hands‑on penetration testing.
• Strong attention to detail and ability to work independently.
• Bachelor’s degree in a STEM field preferred.
• Industry‑standard certification (e.g., Security+) strongly preferred.
• Ability to obtain and maintain a Public Trust clearance.

Required skills

• Manual host testing per CIS benchmarks.
• Burp Suite.
• Qualys.
• Nessus.
• Acunetix, Appdetective, DbVisualizer (preferred).
• Knowledge of OWASP Top 10.
• Familiarity with NIST SP 800-53 and NIST Risk Management Framework.
• Understanding of computer networking concepts, protocols, and network security methodologies.

What we offer

• Salary range $68,000 – $73,000 per year.
• Bonus and profit‑sharing opportunities.
• 3 weeks of personal leave in the first year.
• 11 paid holidays and 5 days of flexible time off annually.
• 401(k) company match up to 10% of salary.