Junior Penetration Tester

Volaris Group; Mississauga; Remote; CAD 96,000 - 125,000; Full time

Job summary

A technology company in Peel Region, Mississauga is seeking a Junior Penetration Tester to enhance its software security posture by identifying and addressing vulnerabilities. The ideal candidate will have a strong technical background, proficiency in programming, and an understanding of security testing methodologies. This is a remote position available for candidates in North America.

Qualifications

• Strong software development experience is highly regarded.
• Proficient in at least one or two programming languages.
• Solid understanding of web technologies and vulnerabilities.

Responsibilities

• Conduct penetration testing of various applications developed by the company.
• Write detailed reports on identified vulnerabilities.
• Utilise testing techniques and frameworks to assess security posture.
• Develop custom exploits and tools as needed.
• Assist with the Invicti vulnerability scanning platform.

Skills

Technical background

Scripting or programming languages

Linux command line

Understanding of TCP, HTTP

Knowledge of web app vulnerabilities

Excellent communication skills

Job description

Overview

Volaris Group are looking for a highly talented and motivated Junior Penetration Tester to join our ranks. As part of the Software Assurance Team, the successful candidate will be helping to improve the security posture of Volaris business units by identifying vulnerabilities in their software before they can be exploited by malicious parties.

Responsibilities

• Conduct penetration testing of web/mobile/desktop applications developed by Volaris business units.
• Write detailed reports on vulnerabilities that are identified, covering overall impact, reproduction steps and recommendations.
• Utilise a variety of testing techniques, frameworks and tools to assess security posture.
• Develop custom exploits, tools and automations as required.
• Assist VBUs with queries related to the Invicti web app vulnerability scanning platform.

Requirements

• Strong technical background (software development experience is highly regarded).
• Proficient in at least one or two scripting or general-purpose programming languages.
• A deep affinity for the Linux command line, including coreutils and Bash scripting for automation and data manipulation.
• Solid understanding of TCP, HTTP and related web technologies.
• Knowledge of the most common types of web app vulnerabilities (XSS, SQL Injection, SSRF, etc.).
• Excellent written and verbal communication skills.
• Although this is a remote position, candidates must be based in North America.

Worker Type

Regular

Number of Openings Available

1