Penetration Tester

Squad Conseil Et Expertises; Marín; Presencial; EUR 30.000 - 45.000; Jornada completa

Descripción de la vacante

SQUAD Group is seeking a hands-on Junior Penetration Tester to join a growing pentest practice focused on web, mobile, and API apps. You’ll work with senior testers on long-running client missions, perform assessments, document findings with clarity, and grow toward more autonomous engagements over time.

You will conduct tests following OWASP methodologies, utilize Burp Suite, ZAP, and Nmap, and contribute to internal methods and reports for varied international clients.

Formación

• 3 years of experience in Cybersecurity, including at least 1 year dedicated to application penetration testing.
• Solid understanding of web application vulnerabilities and exploitation techniques.
• Working knowledge of Burp Suite, ZAP, and standard recon/exploitation tooling.
• Basic scripting ability (Python or Bash) to support testing and automation.
• Fluent professional English, spoken and written.
• Comfortable working independently on long missions while staying aligned with senior pentesters and client stakeholders.

Responsabilidades

• Conduct penetration tests on web applications, APIs, and mobile apps, following OWASP methodologies (OWASP Top 10, ASVS, MASVS).
• Perform manual and tool-assisted vulnerability discovery (Burp Suite, OWASP ZAP, Nmap, and similar tooling).
• Reproduce, validate, and document vulnerabilities with clear technical evidence and business-risk framing.
• Write clear, well-structured pentest reports and executive summaries in English for international clients.
• Support remediation discussions with development teams, explaining findings and validating fixes.
• Contribute to internal methodology, checklists, and knowledge-sharing within the pentest team.
• Work on long-duration client missions, maintaining consistent quality and communication throughout the engagement.

Conocimientos

Fluent English

Python or Bash scripting

Independent working

Herramientas

Burp Suite

OWASP ZAP

Nmap

Descripción del empleo

Since 2011, SQUAD Group has been a key player in the cybersecurity landscape. We partner with leading organizations to protect their information systems through a comprehensive 360° offering of consulting, integration, expertise, and managed services

Our mission: Securing Together!

We believe in a collaborative approach to cybersecurity, where experts and clients work hand-in-hand to anticipate threats and protect critical infrastructure.

As part of our growing team, we're seeking a Junior Pentester

Your Role

You are a hands-on, curious security tester joining a pentest practice focused on web, mobile, and API applications. Working alongside senior pentesters on long-running client missions, you'll conduct hands-on assessments, document findings clearly, and grow into more autonomous engagements over time.

Your Responsibilities

• Conduct penetration tests on web applications, APIs, and mobile apps, following OWASP methodologies (OWASP Top 10, ASVS, MASVS).
• Perform manual and tool-assisted vulnerability discovery (Burp Suite, OWASP ZAP, Nmap, and similar tooling).
• Reproduce, validate, and document vulnerabilities with clear technical evidence and business-risk framing.
• Write clear, well-structured pentest reports and executive summaries in English for international clients.
• Support remediation discussions with development teams, explaining findings and validating fixes.
• Contribute to internal methodology, checklists, and knowledge-sharing within the pentest team.
• Work on long-duration client missions, maintaining consistent quality and communication throughout the engagement.

What You Bring

• 3 years of experience in Cybersecurity, including at least 1 year dedicated to application penetration testing.
• Solid understanding of web application vulnerabilities (injection, authN/authZ flaws, SSRF, IDOR, etc.) and common exploitation techniques.
• Working knowledge of Burp Suite, ZAP, and standard recon/exploitation tooling.
• Basic scripting ability (Python or Bash) to support testing and automation.
• Fluent professional English, spoken and written — required for client-facing missions and report writing.
• Comfortable working independently on long missions while staying aligned with senior pentesters and client stakeholders.

Preferred Certifications: eJPT, eWPT, OSCP (in progress or recently obtained), or equivalent hands‑on offensive security credentials.

Why Join Squad? xsgfvud

Personalized Growth: We help you build a training and certification plan aligned with your professional goals through our SquadExeperience

• Expertise Development: Participate in internal events like our MixYourTalent webinars and monthly CTF sessions .
• Visibility: Attend major industry conferences and contribute to our #TheExpert technical b log
• Culture: Enjoy a dynamic and close‑knit environment with after‑work events and team gatherings that foster great camaraderie.