Junior Penetration Tester - Web, API & Mobile Security

Squad Conseil Et Expertises; Marín; Presencial; EUR 30.000 - 45.000; Jornada completa

Descripción de la vacante

SQUAD Group is seeking a hands-on Junior Penetration Tester to join a growing pentest practice focused on web, mobile, and API apps. You’ll work with senior testers on long-running client missions, perform assessments, document findings with clarity, and grow toward more autonomous engagements over time.

You will conduct tests following OWASP methodologies, utilize Burp Suite, ZAP, and Nmap, and contribute to internal methods and reports for varied international clients.

Formación

• 3 years of experience in Cybersecurity, including at least 1 year dedicated to application penetration testing.
• Solid understanding of web application vulnerabilities and exploitation techniques.
• Working knowledge of Burp Suite, ZAP, and standard recon/exploitation tooling.
• Basic scripting ability (Python or Bash) to support testing and automation.
• Fluent professional English, spoken and written.
• Comfortable working independently on long missions while staying aligned with senior pentesters and client stakeholders.

Responsabilidades

• Conduct penetration tests on web applications, APIs, and mobile apps, following OWASP methodologies (OWASP Top 10, ASVS, MASVS).
• Perform manual and tool-assisted vulnerability discovery (Burp Suite, OWASP ZAP, Nmap, and similar tooling).
• Reproduce, validate, and document vulnerabilities with clear technical evidence and business-risk framing.
• Write clear, well-structured pentest reports and executive summaries in English for international clients.
• Support remediation discussions with development teams, explaining findings and validating fixes.
• Contribute to internal methodology, checklists, and knowledge-sharing within the pentest team.
• Work on long-duration client missions, maintaining consistent quality and communication throughout the engagement.

Conocimientos

Fluent English

Python or Bash scripting

Independent working

Herramientas

Burp Suite

OWASP ZAP

Nmap

Descripción del empleo

SQUAD Group is seeking a hands-on Junior Penetration Tester to join a growing pentest practice focused on web, mobile, and API apps. You’ll work with senior testers on long-running client missions, perform assessments, document findings with clarity, and grow toward more autonomous engagements over time.

You will conduct tests following OWASP methodologies, utilize Burp Suite, ZAP, and Nmap, and contribute to internal methods and reports for varied international clients.