Junior Penetration Tester: Grow in Fast-Paced Security Team

iConnect IT Business Solutions DMCC; Dubai; On-site; AED 180,000 - 300,000; Full time

Job summary

iConnect IT Business Solutions DMCC is seeking a Junior Penetration Tester to support manual-first testing across web, mobile, infrastructure and cloud for clients in the UAE, working with senior testers under governance.

Responsibilities include drafting detailed findings, maintaining vulnerability registers, retesting remediations, and QA to reduce false positives. Occasional travel to client sites in the UAE may be required.

Qualifications

• 1+ year of hands-on penetration testing experience (professional, internship, or labs/CTFs).
• Practical skills in web/API, mobile, or network/infrastructure testing.
• Comfortable with manual testing plus tooling like Burp Suite, Acunetix and Nmap.
• Strong written and spoken English; able to explain findings to a technical audience.

Responsibilities

• Support manual and tool-assisted penetration tests across web apps, mobile apps, and infrastructure under senior guidance.
• Follow approved rules-of-engagement and exploit-authorisation processes.
• Draft per-finding detail for reports including severity, evidence and mitigations.
• Maintain vulnerability registers and log findings in vulnerability management platforms.
• Retest remediated vulnerabilities and support closure reporting.
• Reproduce and explain reported vulnerabilities on request.
• QA your own work to minimise false positives before review.

Skills

Penetration testing

Web/API testing

Mobile testing

Network testing

Burp Suite

Acunetix

Nmap

English communication

Education

Bachelor’s degree in Computer Science, Information Security, or related field

Tools

Burp Suite

Acunetix

Nmap

Job description

iConnect IT Business Solutions DMCC is seeking a Junior Penetration Tester to support manual-first testing across web, mobile, infrastructure and cloud for clients in the UAE, working with senior testers under governance.

Responsibilities include drafting detailed findings, maintaining vulnerability registers, retesting remediations, and QA to reduce false positives. Occasional travel to client sites in the UAE may be required.