Junior Pentester
Core
Conduct penetration testing engagements across web applications, APIs, mobile, cloud, networks, and LLMs, combining manual techniques with AI-assisted workflows.
Role type
Junior IC penetration tester
Builds
Security assessments and vulnerability reports for diverse customer base
Domain
Cybersecurity / Offensive Security
Deliverable
production ML models | product features | dashboards & analysis | client delivery
Required skills
Penetration testing, vulnerability assessment, web application security (OWASP Top 10), authentication/session management, injection flaws, AI tool validation, security reporting
Preferred skills
Bug bounty experience, CTF participation, security research, responsible disclosures, technical blogging
Technologies
AI-assisted security tools, reconnaissance tools, payload generators, vulnerability scanners
Responsibilities
Conduct penetration testing engagements across web applications, APIs, mobile applications, cloud environments, LLMs, and networks; Combine manual testing techniques with AI-assisted tools for activities such as reconnaissance, payload generation, and initial vulnerability triage; Validate AI-generated results manually, assess their accuracy, and understand the limitations of automated security tooling; Identify, validate, and document security vulnerabilities with clear reproduction steps, supporting evidence, risk ratings, and practical remediation recommendations; Assist senior penetration testers with engagement scoping, preparation, and other pre-engagement activities as required; Contribute to the continuous improvement of internal testing templates, skills, plugins, MCPs, checklists, and technical documentation
Seniority
Junior, hands-on IC