Junior Penetration Tester - Immediate Joiner

iConnect IT Business Solutions DMCC; Dubai; On-site; AED 180,000 - 300,000; Full time

Job summary

iConnect IT Business Solutions DMCC is seeking a Junior Penetration Tester to support manual-first testing across web, mobile, infrastructure and cloud for clients in the UAE, working with senior testers under governance.

Responsibilities include drafting detailed findings, maintaining vulnerability registers, retesting remediations, and QA to reduce false positives. Occasional travel to client sites in the UAE may be required.

Qualifications

• 1+ year of hands-on penetration testing experience (professional, internship, or labs/CTFs).
• Practical skills in web/API, mobile, or network/infrastructure testing.
• Comfortable with manual testing plus tooling like Burp Suite, Acunetix and Nmap.
• Strong written and spoken English; able to explain findings to a technical audience.

Responsibilities

• Support manual and tool-assisted penetration tests across web apps, mobile apps, and infrastructure under senior guidance.
• Follow approved rules-of-engagement and exploit-authorisation processes.
• Draft per-finding detail for reports including severity, evidence and mitigations.
• Maintain vulnerability registers and log findings in vulnerability management platforms.
• Retest remediated vulnerabilities and support closure reporting.
• Reproduce and explain reported vulnerabilities on request.
• QA your own work to minimise false positives before review.

Skills

Penetration testing

Web/API testing

Mobile testing

Network testing

Burp Suite

Acunetix

Nmap

English communication

Education

Bachelor’s degree in Computer Science, Information Security, or related field

Tools

Burp Suite

Acunetix

Nmap

Job description

Job Description:

Immediate joiner required.

We’re looking for a Junior Penetration Tester to join our security testing practice. You’ll support manual-first penetration testing engagements on web, mobile, infrastructure and cloud — both internally and for clients across the UAE — working alongside senior testers within formal testing governance.

Responsibilities

• Support manual and tool-assisted penetration tests across web applications, web services, mobile apps (iOS/Android) and infrastructure, under the guidance of a senior tester.
• Operate within approved rules-of-engagement / exploit-authorisation processes before any exploitation activity.
• Escalate critical findings (RCE, SQLi, and similar) immediately, outside the standard reporting cycle.
• Draft per-finding detail for reports: severity, affected assets, root cause, evidence, business impact, recommendations and mitigations.
• Maintain vulnerability registers and log findings into vulnerability management platforms.
• Retest remediated vulnerabilities and support closure reporting.
• Reproduce and explain reported vulnerabilities on request.
• QA your own work to eliminate false positives before it reaches a senior reviewer.

Requirements

• 1+ year of hands-on penetration testing experience — professional, internship, or substantial lab and CTF work.
• Practical skills in at least one of: web/API testing, mobile (iOS/Android), or network/infrastructure testing.
• Comfortable with manual testing plus tooling such as Burp Suite, Acunetix and Nmap.
• Good spoken and written English; able to explain a finding clearly to a technical audience.
• Willing to work under formal engagement governance — signed-off scopes, exploit authorisation, escalation protocols.
• Based in the UAE and available to join immediately.
• Able to travel to client sites across the UAE as required.

Qualifications

• CEH, Security+, OSCP or an equivalent recognised security certification is an advantage, not a requirement.
• Bachelor’s degree in Computer Science, Information Security, or a related field — or equivalent practical experience.
• Clean background suitable for formal verification (identity, right to work, education, employment history).