Junior Penetration Tester
PoCForge (Cyber Security)
New Delhi, Delhi, India0–2 yrs5d agovia LinkedIn
About the Role
- A curious, motivated Junior Penetration Tester to join a remote team.
- Work alongside senior testers on web, API, network and cloud engagements.
- Learn methodology and gradually take ownership of assessments.
- Deliver accurate, well-documented findings with clear proof-of-concepts and practical remediation advice.
Key Responsibilities
- Perform authorized penetration tests on web applications, APIs, internal/external networks, and cloud environments under guidance.
- Identify, validate, and safely demonstrate vulnerabilities (e.g., OWASP Top 10, misconfigurations, privilege escalation).
- Conduct reconnaissance and vulnerability scanning, and manually verify results.
- Write clear, accurate technical reports with risk ratings, reproducible proof-of-concepts, and remediation guidance.
- Support retesting to confirm issue fixes.
- Stay current with new vulnerabilities, attack techniques, and security tooling.
- Follow rules of engagement, scope, and confidentiality requirements.
Requirements & Tech Stack
- Networking: Solid understanding of TCP/IP, DNS, HTTP/S.
- Web Technologies: Solid understanding of common web technologies.
- OWASP Top 10: Working knowledge of the OWASP Top 10 and common attack techniques.
- Tools: Hands-on experience with Burp Suite, Nmap, Metasploit, and Kali Linux.
- Environments: Familiarity with Linux and Windows environments.
- Scripting: Basic scripting in Python, Bash, or PowerShell.
- Communication: Strong written and verbal communication skills in English.
Qualifications
- 0–2 years of experience in penetration testing, bug bounty, CTFs, or a related security role.
- A degree in Computer Science, IT, or a related field, or equivalent practical experience.
Nice to Have
- Certifications such as eJPT, CEH, PNPT, OSCP, or CompTIA PenTest+.
- Bug bounty acknowledgements, CVEs, or a public CTF/HackTheBox/TryHackMe profile.
- Exposure to Active Directory, mobile application, or cloud (AWS/Azure/GCP) security testing.
What We Offer
- Fully remote work.
- Mentorship from experienced penetration testers and exposure to real client engagements.
- Support for training and security certifications.
- A clear growth path towards a Penetration Tester / Senior role.