Junior Penetration Tester

TXT GROUP; Roma; Ibrido; EUR 30.000 - 40.000; Tempo pieno

Descrizione del lavoro

A leading IT security firm in Rome is seeking a Junior Penetration Tester to join its team. The ideal candidate will have 1–2 years of experience in vulnerability assessment and penetration testing. Responsibilities include performing tests on web applications and networks, producing technical reports, and collaborating with internal teams. The position offers a hybrid work model and opportunities for professional growth.

Servizi

Opportunity to work in an international environment

Team-building activities and corporate events

Collaborative team culture

Hybrid working model

Compensation based on experience

Competenze

• 1–2 years of experience in a technical security role.
• Strong understanding of penetration testing methodologies.
• Ability to produce detailed technical documentation.

Mansioni

• Perform penetration testing on web applications, infrastructure, and corporate networks.
• Conduct vulnerability assessments using automated tools and manual techniques.
• Produce clear, detailed technical reports with remediation recommendations.

Conoscenze

Vulnerability Assessment

Penetration Testing

Nmap

Burp Suite

Nessus

Metasploit

Python

PowerShell

Bash

JavaScript

Formazione

Bachelor’s degree in Computer Science, Engineering, or related field

Descrizione del lavoro

Join to apply for the Junior Penetration Tester role at TXT GROUP

HSPI S.p.A , part of TXT Group, is seeking a Junior Penetration Tester to join its team at the Rome office. The ideal candidate, with at least 1–2 years of experience, will be integrated into a technical team focused on excellence in offensive security. The role will involve Vulnerability Assessment, Penetration Testing, Red Teaming, and support for risk management, working on highly technical and innovative projects.

Key Responsibilities

• Perform penetration testing on web applications, infrastructure, and corporate networks.
• Conduct vulnerability assessments using automated tools and manual techniques.
• Produce clear, detailed technical reports with remediation recommendations.
• Use reference frameworks such as OWASP and MITRE ATT&CK.
• Collaborate with internal teams to improve clients’ security posture.
• Participate in continuous training and research on emerging attack techniques.

Required Technical Skills

• Solid understanding of Vulnerability Assessment and Penetration Testing methodologies.
• Experience with tools such as Nmap, Burp Suite, Nessus, Metasploit, etc.
• Familiarity with scripting languages: Python, PowerShell, Bash, JavaScript.
• Proficient with Linux and Windows operating systems (including CLI and basic administration).
• Knowledge of core ICT architectures (applications, infrastructure, networks).
• Understanding of networking fundamentals, protocols, services, and attack techniques.
• Awareness of the MITRE ATT&CK framework and OWASP Top 10.
• Ability to write technical documentation and communicate findings clearly.

Preferred Certifications (nice to have)

• OSCP – Offensive Security Certified Professional
• GPEN – GIAC Penetration Tester
• eCPPT / eWPTX – eLearnSecurity
• OSWA / CRTP / CRTE / PNPT / CPTS
• CEH – Certified Ethical Hacker

Additional Profile Attributes

Candidates should possess an analytical mindset, strong technical curiosity, proactive attitude, and excellent time‑management skills.

Education

• Bachelor’s degree in Computer Science, Engineering, or related field.

What We Offer

• Opportunity to work in an international environment.
• Team-building activities and corporate events.
• Collaborative team culture focused on achieving shared objectives.
• Hybrid working model.
• Appointment via apprenticeship or fixed-term contract; entry level and compensation based on actual experience.

The position is open to candidates regardless of gender, in accordance with Legislative Decree n. 198/2006. The company promotes equal opportunities and values diversity in all its forms.