Pentester Junior

pss | beyond cybersecurity; United States; Remote; USD 70,000 - 110,000; Full time

Job summary

pss | beyond cybersecurity is seeking a security tester to perform assessments on client systems within an agreed scope. You will start by pairing with a senior tester and, as you gain confidence, run your own engagements.

Half the time you test, half you write findings with reproduction steps, evidence, and business impact. You should have hands-on practice from labs, CTFs, or bug bounties, be comfortable with Burp Suite and a scripting language, and be able to explain an attack path to

Qualifications

• Hands-on practice: labs, CTFs and bug bounty all count.
• Comfortable with Burp Suite and a scripting language.
• Can explain an attack path to somebody who is not technical.

Responsibilities

• Test within an agreed scope and stay inside it.
• Document every finding with steps, evidence and real impact.
• Retest fixes and say plainly whether they closed the issue.

Skills

Scripting language

Tools

Burp Suite

Job description

You carry out security assessments on client systems within an agreed scope and timeframe. For the first few months you work alongside a senior tester; after that you run your own engagements. Roughly half the job is testing and half is writing: each finding needs clear reproduction steps, evidence and an explanation of the real business impact, because that is what allows the client to fix it.

What you will do:

• Test within an agreed scope and stay inside it
• Document every finding with steps, evidence and real impact
• Retest fixes and say plainly whether they closed the issue

What they ask for:

• Hands-on practice: labs, CTFs and bug bounty all count
• Comfortable with Burp Suite and a scripting language
• Can explain an attack path to somebody who is not technical

Nice to have:

• eJPT, PNPT or equivalent
• Public write-ups
• A disclosed finding