Cyber Security Engineer

Job Title

Junior Penetration Tester (Application & Infrastructure Security)

Job Summary

We are looking for a motivated and ethical Junior Penetration Tester to join our offensive security team. This role is ideal for early-career cybersecurity professionals with strong fundamentals, hands-on practice through labs or CTFs, and a clear interest in either Application Security or Infrastructure Security.

The selected candidate will work under supervision to assess applications, networks, and systems, identify security weaknesses, and produce clear, actionable security reports.

Key Responsibilities

• Execute penetration testing activities under supervision across applications and infrastructure
• Validate identified vulnerabilities and reduce false positives
• Document findings with clear risk impact and remediation recommendations
• Support retesting and verification of fixed vulnerabilities
• Develop, maintain, and enhance internal offensive security scripts and tools

Technical Scope & Knowledge

Application Security (Awareness or Hands-on)

• Web and mobile application testing
• APIs, authentication, authorization, and input validation
• OWASP Top 10 vulnerabilities
• Web technologies (HTTP/HTTPS, sessions, APIs)
• Familiarity with tools such as Burp Suite or equivalent

Infrastructure Security (Awareness or Hands-on)

• Network and system security fundamentals
• TCP/IP, common ports, and network services
• Windows and Linux basics
• Exposure to Active Directory and cloud fundamentals
• Identification of misconfigurations, exposed services, and privilege issues

Candidates are expected to demonstrate stronger interest or exposure in either Application Security or Infrastructure Security.

Candidate Qualities

• Strong ethical mindset and respect for testing authorization and scope
• High learning ability, curiosity, and problem-solving skills
• Ability to clearly explain and document technical findings in English
• Participation in Capture The Flag (CTF) events or hands-on security challenges
• Practical understanding of OWASP Top 10 risks