Junior Penetration Tester

Training Basket; Dadri; On-site; INR 300,000 - 540,000; Full time

Job summary

Training Basket is seeking a junior security tester to conduct authorized penetration testing and vulnerability assessments across web apps, networks, and systems. You will analyze risks, draft remediation guidance, and support retesting under supervision, applying OWASP Top 10 principles.

The role requires foundational knowledge of testing, networking, and security tooling, with a willingness to learn and grow in a collaborative team environment within India.

Qualifications

• Basic knowledge of penetration testing and ethical hacking.
• Understanding of networking concepts (TCP/IP, DNS, HTTP/HTTPS, and ports).
• Familiarity with Linux and Windows operating systems.
• Basic knowledge of web application security and common vulnerabilities.
• Familiarity with tools such as Burp Suite, Nmap, Wireshark, and Metasploit.
• Basic scripting knowledge in Python, Bash, or PowerShell is an advantage.
• Understanding of OWASP Top 10 and vulnerability assessment methodologies.
• Strong analytical, problem-solving, and documentation skills.
• Willingness to learn new cybersecurity tools and techniques.

Responsibilities

• Conduct authorized penetration testing and vulnerability assessments on web applications, networks, and systems.
• Identify, analyze, and document security vulnerabilities and potential risks.
• Perform basic security testing using industry-standard tools.
• Assist in web application, network, and API security assessments.
• Prepare detailed reports describing vulnerabilities, their impact, and remediation recommendations.
• Collaborate with senior penetration testers and security teams to validate findings.
• Support retesting activities to verify that identified vulnerabilities have been resolved.

Skills

Penetration testing

Ethical hacking

Networking concepts

Analytical skills

Documentation

Scripting basics

OWASP Top 10

Willingness to learn

Tools

Burp Suite

Nmap

Wireshark

Metasploit

Job description

Conduct authorized penetration testing and vulnerability assessments on web applications, networks, and systems.

Identify, analyze, and document security vulnerabilities and potential risks.

Perform basic security testing using industry-standard tools.

Assist in web application, network, and API security assessments.

Use tools such as Burp Suite, Nmap, Wireshark, and Metasploit under approved testing scopes.

Perform vulnerability scanning and basic manual security testing.

Understand and apply OWASP Top 10 security guidelines.

Prepare detailed reports describing vulnerabilities, their impact, and remediation recommendations.

Collaborate with senior penetration testers and security teams to validate findings.

Support retesting activities to verify that identified vulnerabilities have been resolved.

Stay updated on cybersecurity threats, attack techniques, and security best practices.

Follow ethical hacking guidelines and obtain proper authorization before performing security tests.

Requirements

Basic knowledge of penetration testing and ethical hacking.

Understanding of networking concepts, including TCP/IP, DNS, HTTP/HTTPS, and ports.

Familiarity with Linux and Windows operating systems.

Basic knowledge of web application security and common vulnerabilities.

Familiarity with tools such as Burp Suite, Nmap, Wireshark, and Metasploit.

Basic scripting knowledge in Python, Bash, or PowerShell is an advantage.

Understanding of OWASP Top 10 and vulnerability assessment methodologies.

Strong analytical, problem-solving, and documentation skills.

Willingness to learn new cybersecurity tools and techniques.