Job Title Junior Penetration Tester (Application & Infrastructure Security) Job Summary We are looking for a motivated and ethical Junior Penetration Tester to join our offensive security team. This role is ideal for early-career cybersecurity professionals with strong fundamentals, hands-on practice through labs or CTFs, and a clear interest in either Application Security or Infrastructure Security. The selected candidate will work under supervision to assess applications, networks, and systems, identify security weaknesses, and produce clear, actionable security reports. Key Responsibilities Execute penetration testing activities under supervision across applications and infrastructure Validate identified vulnerabilities and reduce false positives Document findings with clear risk impact and remediation recommendations Support retesting and verification of fixed vulnerabilities Develop, maintain, and enhance internal offensive security scripts and tools Technical Scope & Knowledge Application Security (Awareness or Hands-on) Web and mobile application testing APIs, authentication, authorization, and input validation OWASP Top 10 vulnerabilities Web technologies (HTTP/HTTPS, sessions, APIs) Familiarity with tools such as Burp Suite or equivalent Infrastructure Security (Awareness or Hands-on) Network and system security fundamentals TCP/IP, common ports, and network services Windows and Linux basics Exposure to Active Directory and cloud fundamentals Identification of misconfigurations, exposed services, and privilege issues Candidates are expected to demonstrate stronger interest or exposure in either Application Security or Infrastructure Security. Candidate Qualities Strong ethical mindset and respect for testing authorization and scope High learning ability, curiosity, and problem-solving skills Ability to clearly explain and document technical findings in English Participation in Capture The Flag (CTF) events or hands-on security challenges Practical understanding of OWASP Top 10 risks