About the role
We're looking for a curious, driven junior penetration tester to join our red team. You'll work alongside senior operators to assess the security posture of client environments — from external perimeters to internal networks — and help organizations understand their real-world risk before attackers do.
This is a hands-on role. You'll be in the terminals, writing reports, and debriefing clients from day one, with clear mentorship and structured growth ahead of you.
What you'll do
Conduct web application, network, and API penetration tests under guidance from senior team members.
Perform reconnaissance, enumeration, exploitation, and post-exploitation on scoped engagements.
Document findings clearly and produce client-facing reports with actionable remediation steps.
Research new vulnerabilities, attack techniques, and tooling to bring fresh methods to the team.
Participate in red team exercises, phishing simulations, and adversary emulation campaigns.
Collaborate with blue team counterparts during purple team engagements.
What we're looking for
Foundational knowledge of networking (TCP/IP, DNS, HTTP) and common OS internals (Windows/Linux).
Familiarity with core pentesting tools: Nmap, Burp Suite, Metasploit, Nessus, or equivalents.
Understanding of OWASP Top 10 and common vulnerability classes (SQLi, XSS, misconfigurations, etc.).
Basic scripting ability in Python, Bash, or PowerShell — you don't need to be a developer, but you should be comfortable automating simple tasks.
Strong written communication skills; reports are half the job.
Ethical mindset and commitment to responsible disclosure practices.