Pentester Junior

Applus+ Laboratories; Barcelona; Presencial; EUR 30.000 - 48.000; Jornada completa

Descripción de la vacante

Applus+ Laboratories in Spain seeks a security tester to perform hands-on assessments within scoped engagements. You will work with a senior tester initially, then run your own engagements, balancing testing with clear, evidence-backed reporting of business impact.

You should be comfortable with Burp Suite and scripting skills, and able to explain an attack path to non-technical colleagues. Labs, CTFs or bug bounty experience is valued.

Formación

• Hands-on practice through labs, CTFs and bug bounty programs.
• Ability to explain an attack path to non-technical stakeholders.
• Comfortable with security testing workflows and reporting.

Responsabilidades

• Test within an agreed scope and stay inside it
• Document every finding with steps, evidence and real impact
• Retest fixes and verify closure of issues

Conocimientos

Hands-on security testing

Explain attack paths

Labs/CTFs/bug bounty familiarity

Herramientas

Burp Suite

Scripting language (e.g., Python)

Descripción del empleo

You carry out security assessments on client systems within an agreed scope and timeframe. For the first few months you work alongside a senior tester; after that you run your own engagements. Roughly half the job is testing and half is writing: each finding needs clear reproduction steps, evidence and an explanation of the real business impact, because that is what allows the client to fix it.

What you will do:

• Test within an agreed scope and stay inside it
• Document every finding with steps, evidence and real impact
• Retest fixes and say plainly whether they closed the issue

What they ask for:

• Hands-on practice: labs, CTFs and bug bounty all count
• Comfortable with Burp Suite and a scripting language
• Can explain an attack path to somebody who is not technical

Nice to have:

• eJPT, PNPT or equivalent
• Public write-ups
• A disclosed finding