Junior Penetration Test Engineer

tervax.com; United States; Remote; USD 70,000 - 110,000; Full time

Benefits offered by this job

OSCP Certification

Bug bounty programs

Cloud security familiarity

Job summary

tervax.com is seeking a security tester to evaluate web apps, APIs, mobile apps, and infrastructure. You will test, document vulnerabilities, and help teams understand findings, with guidance from senior engineers.

Responsibilities include identifying weaknesses, recording evidence, producing impact-focused reports, and staying current with attack methods. Remote work flexibility from Turkey is supported, with collaboration across teams.

Qualifications

• Bachelor’s degree in computer science, cybersecurity, or a related field.
• Basic knowledge of common vulnerabilities, including the OWASP Top 10.
• Familiarity with tools such as Burp Suite, Nmap, or Metasploit.
• Working knowledge of at least one scripting language, such as Python, Bash, or PowerShell.
• Strong analytical, problem-solving, writing, and communication skills.

Responsibilities

• Test web applications and APIs for security weaknesses.
• Identify vulnerabilities and record clear technical evidence.
• Prepare reports that explain findings and their impact.
• Work with senior engineers on more complex assessments.
• Follow security research and emerging attack methods.

Skills

Security testing

Vulnerability assessment

Documentation

Python

Bash

PowerShell

Analytical skills

Writing skills

Communication skills

Education

Bachelor's degree in CS/Cybersecurity

Tools

Burp Suite

Nmap

Metasploit

Job description

Role overview

Help assess the security of web applications, APIs, mobile apps, and infrastructure. You’ll carry out testing with guidance from more experienced engineers, document vulnerabilities, and help teams understand the findings.

Responsibilities

• Test web applications and APIs for security weaknesses.
• Identify vulnerabilities and record clear technical evidence.
• Prepare reports that explain findings and their impact.
• Work with senior engineers on more complex assessments.
• Follow security research and emerging attack methods.

Requirements

• A bachelor’s degree in computer science, cybersecurity, or a related field.
• Basic knowledge of common vulnerabilities, including the OWASP Top 10.
• Familiarity with tools such as Burp Suite, Nmap, or Metasploit.
• Working knowledge of at least one scripting language, such as Python, Bash, or PowerShell.
• Strong analytical, problem-solving, writing, and communication skills.

Nice to have

• A relevant certification, such as OSCP or CEH.
• Participation in bug bounty programs.
• Familiarity with cloud security or DevSecOps practices.

Benefits and work setup

• Full-time role, remote from Turkey.