Junior Penetration Tester

Malleum; United States; Remote; USD 60,000 - 100,000; Full time

Job summary

Join a premier cybersecurity consultancy as a Pen Tester and make a significant impact in safeguarding clients from sophisticated threats. This role offers the chance to assess security postures, conduct penetration tests, and collaborate with a talented team on high-stakes engagements. You'll have the opportunity to work with cutting-edge technology and develop your skills in adversarial emulation and custom exploit development. If you're a passionate individual eager to grow in a dynamic startup environment, this position is perfect for you.

Qualifications

• 1-2 years of hands-on penetration testing experience.
• Proficiency in manual testing techniques beyond automated scanning.

Responsibilities

• Conduct web, network, mobile, and API penetration tests to identify vulnerabilities.
• Write detailed technical reports and present findings to stakeholders.

Skills

Penetration Testing

Manual Testing Techniques

OWASP Top 10

Active Directory Attacks

Communication Skills

Education

Bachelor's Degree in Cybersecurity or related field

Tools

Burp Suite

Nessus

Metasploit

Kali Linux

Job description

About Us
We are a premier cybersecurity consultancy, blending advanced offensive and defensive strategies to safeguard our customers.

With a team known for its contributions to cybersecurity research at platforms like Black Hat and DEF CON, we excel at identifying and mitigating sophisticated threats. Large enterprises from a range of industries trust us for advanced adversarial emulation and for critical support in managing their cyber frameworks. Governments trust us with classified projects, relying on our precision and discretion to handle sensitive information securely.

We’re a small group that makes a big impact. Our deep technical expertise and our commitment to clients continue to fuel our success, and with success comes growth – we’re currently searching for a Pen Tester early in their career journey.

Role Profile
In this position, your mandate will be to assess the security posture of our clients by identifying and exploiting vulnerabilities in networks, applications, and systems. With guidance from colleagues, you will conduct controlled security assessments, execute attack simulations, and analyze security weaknesses. You’ll document findings and collaborate with colleagues and client teams to support remediation efforts. You will also contribute to analysis and reporting that provides actionable insights for improving defenses.

This is an outstanding opportunity to join an accelerating startup, work with cutting-edge tech, and tackle critical problems on high-stakes engagements.

Key Responsibilities

• Conduct web, network, mobile, and API penetration tests to identify vulnerabilities.
• Support team assessments, simulating real-world attack scenarios.
• Develop and execute custom exploits, scripts, and attack chains.
• Conduct source code reviews for security weaknesses in applications.
• Assess cloud security in AWS, Azure, and GCP, as well as containerized environments like Docker and Kubernetes.
• Collaborate with blue teams, SOC analysts, and developers to remediate findings.
• Write detailed technical reports and present findings to technical and non-technical stakeholders.
• Stay updated on zero-day vulnerabilities, APT tactics, and emerging threats.
• Participate in CTFs, security research, and bug bounty programs to refine skills.

Candidate Profile
As an ideal candidate, you're a smart and passionate developing pen tester with a strong interest in developing your skills in adversarial emulation and custom exploit development. You’re a natural hacker with a founder’s mindset, eager to learn and collaborate, and prone to thrive in a startup environment.

Key Qualifications

• 1-2 years of hands-on penetration testing experience.
• Proficiency in manual testing techniques beyond automated scanning.
• Knowledge of OWASP Top 10, MITRE ATT&CK, and CVSS scoring.
• Experience with Active Directory attacks, privilege escalation, and lateral movement.
• Skilled in the use of tools like Burp Suite, Nessus, Metasploit, Kali Linux.
• Familiarity with scripting in Python, PowerShell, Bash, or Ruby.
• Excellent communication and interpersonal skills.

Are you authorized to work for any employer in Canada?*