Junior Penetration Tester - Offensive Security

Role Description

At CyberWhiz, we don't just run penetration tests, we push the boundaries of offensive security. We are looking for a Junior Penetration Tester to join our growing offensive security team and contribute to penetration testing and red team engagements for our enterprise clients.

From web, cloud and mobile application security to IoT penetration tests, this role offers the opportunity to work on challenging projects alongside experienced senior testers and build a strong foundation in offensive security.

As a Junior Penetration Tester, you will support high-impact assessments, learn from senior team members through hands-on mentorship, and grow into a well-rounded offensive security professional.

Key Responsibilities

• Conduct penetration tests on web applications, APIs, and mobile applications (Android/iOS) under the guidance of senior testers
• Support red team engagements, including initial access, lateral movement, and post-exploitation activities
• Identify, validate, and document vulnerabilities with clear, actionable reporting
• Contribute to the development of internal tools, scripts, and methodologies

Interested in remote work opportunities in QA & Testing? Discover QA & Testing Remote Jobs featuring exclusive positions from top companies that offer flexible work arrangements.

• Collaborate with clients to communicate findings and support remediation efforts
• Willingness to gain expertise on IoT Cyber Security penetration testing

Required Qualifications

• 0–2 years of experience in offensive security (internships, CTFs, bug bounty programs, and personal projects are welcome)
• Solid understanding of OWASP Top 10 and web application security fundamentals
• Comfort working in Linux environments and basic scripting skills (Python or Bash)
• Strong analytical thinking, curiosity, and a passion for breaking things (ethically)
• Good written and verbal communication skills in English

Preferred Qualifications

• Certifications such as OSCP, TSE, BSCP, PNPT, or pursuit thereof
• Experience with mobile application testing (Frida, Objection, SSL pinning bypass)
• Active presence on HackTheBox, TryHackMe, PortSwigger Web Security Academy, or bug bounty platforms
• Familiarity with Active Directory attacks and red team tooling
• Personal projects, CVEs, blog posts, or open-source contributions in security

What We Offer

• 100% remote work
• Direct mentorship from senior penetration testers
• Certification sponsorship (OSCP, OSWE, and more)
• Exposure to diverse engagements across multiple industries
• A collaborative team culture where curiosity and growth are valued