Job Search

We are seeking a Junior Penetration Tester (Audit) to support the delivery of security assessments across a range of systems, applications, networks and cloud environments. This is an ideal opportunity for an early-career security professional who is keen to develop practical penetration testing skills while gaining experience in structured audit and compliance engagements. You will work as part of an experienced security team, contributing to assessments that identify vulnerabilities, evaluate control effectiveness and help clients improve their overall security posture.

Your responsibilities will include assisting with scoping and planning penetration tests, performing reconnaissance and vulnerability assessments, and conducting manual and automated testing under appropriate supervision. You will document technical findings clearly, assess risk and potential business impact, and help prepare accurate reports suitable for both technical and non-technical audiences. You may also support evidence collection, control testing, retesting remediation activities and the maintenance of assessment records. Following established methodologies and agreed rules of engagement will be essential, as will protecting sensitive information throughout each engagement.

Applicants should have a foundational understanding of information security, networking, operating systems, web technologies and common vulnerabilities. Familiarity with tools such as Nmap, Burp Suite, Wireshark, Metasploit or equivalent technologies is desirable, along with some knowledge of penetration testing frameworks and audit principles. Relevant practical experience, laboratory work, coursework or certifications such as Security+, Network+, eJPT, PNPT or a similar qualification will be valued. You should be analytical, methodical and willing to learn, with strong written and verbal communication skills. The role requires integrity, attention to detail and the ability to manage priorities while working collaboratively. A commitment to continuous professional development and keeping up to date with emerging threats, testing techniques and security standards is expected.