Pentester Junior

Software Secured; United States; Remote; USD 90,000 - 120,000; Full time

Job summary

Software Secured is seeking a penetration tester to join a remote Canada-based team. You will assess web applications and APIs, focusing on practical risk and real fixes.

Responsibilities include writing clear findings with impact and reproduction steps, and walking developers through the fixes on calls. Strong English writing and Canada work eligibility are required.

Qualifications

• Solid grasp of the OWASP Top 10 beyond naming it.
• Experience testing authentication and authorisation logic.
• Clear written English.
• Legally able to work in Canada.

Responsibilities

• Test web applications and APIs against an agreed scope.
• Write findings with impact, reproduction steps and a concrete fix.
• Walk developers through the finding on a call.

Skills

OWASP Top 10 knowledge

Authn/Authz testing

Clear written English

Canada work eligibility

Tools

GraphQL

Job description

Penetration testing as a service means the same product gets tested every quarter, so you get to see whether your last report changed anything. The team is small and remote across Canada. Report quality is treated as part of the craft, not paperwork after it.

What you will do:

• Test web applications and APIs against an agreed scope
• Write findings with impact, reproduction steps and a concrete fix
• Walk developers through the finding on a call

What they ask for:

• Solid grasp of the OWASP Top 10 beyond naming it
• Experience testing authentication and authorisation logic
• Clear written English
• Legally able to work in Canada

Nice to have:

• Public write-ups or CVEs
• Experience with GraphQL