Pentester Junior

Echelon Risk + Cyber; United States; Remote; USD 90,000 - 150,000; Full time

Job summary

Echelon Risk + Cyber is seeking a security tester to perform focused assessments for client systems. You will work with a senior tester initially, then run engagements independently, balancing testing with written reports that show clear reproduction steps, evidence, and business impact.

Responsibilities include testing within scope, documenting findings with impact, and retesting fixes to confirm closure. Strong communication helps translate technical details for non-technical stakeholders.

Qualifications

• Hands-on testing experience in security assessments.
• Must document findings with reproduction steps and business impact.
• Able to explain attack paths to non-technical stakeholders.

Responsibilities

• Test within an agreed scope and stay inside it.
• Document every finding with steps, evidence and real impact.
• Retest fixes and say plainly whether they closed the issue.

Skills

Burp Suite

Scripting languages

Explain attack paths

Reproduction steps

Tools

Burp Suite

Job description

You carry out security assessments on client systems within an agreed scope and timeframe. For the first few months you work alongside a senior tester; after that you run your own engagements. Roughly half the job is testing and half is writing: each finding needs clear reproduction steps, evidence and an explanation of the real business impact, because that is what allows the client to fix it.

What you will do:

• Test within an agreed scope and stay inside it
• Document every finding with steps, evidence and real impact
• Retest fixes and say plainly whether they closed the issue

What they ask for:

• Hands-on practice: labs, CTFs and bug bounty all count
• Comfortable with Burp Suite and a scripting language
• Can explain an attack path to somebody who is not technical

Nice to have:

• eJPT, PNPT or equivalent
• Public write-ups
• A disclosed finding