Role & seniority: Junior Penetration Tester (entry-level/early-career); focused on supervised delivery with progression toward independent test ownership.

Stack/tools

Core: Burp Suite, Nmap, vulnerability scanners (Nessus, Qualys)
Fundamentals: TCP/IP, DNS, HTTP/S; Linux/Windows basics
Scripting: Python, Bash, or PowerShell
Cloud testing: basic assessments of AWS, Azure, Google Cloud Platform

Top 3 responsibilities

Execute scoped penetration testing tasks under supervision across networks, web apps/APIs, and entry-level cloud environments
Validate automated scan results, perform manual testing, and capture defensible evidence (reproduction steps, screenshots, command output)
Draft technical vulnerability content (root cause, impact, remediation) and maintain audit-ready notes; adhere to testing playbooks and ethical/authorization boundaries

Must-have skills

Technical foundation in networks, web protocols, and vulnerabilities (OWASP Top 10)
Hands-on experience with Burp Suite, Nmap, and vulnerability scanners
Basic scripting (Python, Bash, or PowerShell) and ability to reproduce/verify findings
2–3 years in penetration/security testing or related role; demonstrable practical exposure (labs/CTFs/bug bounties)

Nice-to-haves

Certifications: CompTIA Security+, Burp Suite Certified Practitioner (Associate), pursuing CREST CRT
More advanced cloud security testing experience
Location & work type: Remote; long-term

Full Description

Dice is the leading career destination for tech experts at every stage of their careers. Our client, ACCLiiVE, is seeking the following. Apply via Dice today!

Job Title: Junior Penetration Tester

Location: Remote

Duration: Long Term

Job Summary

Role Purpose

The Junior Penetration Tester is an execution-focused role responsible for performing authorized security testing activities under defined methodologies and senior supervision. The role emphasizes technical fundamentals, repeatable testing discipline, and high-quality evidence capture in support of client penetration testing engagements. This role is designed to build strong delivery hygiene and prepare the individual for independent test ownership at the next grade. Responsibilities Delivery Execution

Execute scoped penetration testing tasks under supervision across

External and internal network assessments
Web application and API testing
Entry-level cloud security testing (AWS, Azure, Google Cloud Platform)
Perform reconnaissance, enumeration, vulnerability validation, and limited exploitation in strict accordance with approved Rules of Engagement.
Validate automated scanner output and eliminate false positives through manual testing.

Evidence & Reporting Support

Capture defensible evidence including

Reproduction steps
Screenshots and command output
Clear attack narratives

Draft technical vulnerability content for reports, including

Root cause analysis
Impact explanation
Remediation guidance aligned to best practice
Maintain detailed working notes suitable for audit, peer review, and retesting.
Operational Discipline
Adhere strictly to ethical testing principles, authorization boundaries, and client confidentiality.
Follow defined testing playbooks, escalation paths, and quality standards.
Participate in post-engagement lessons learned and internal quality reviews.
Learning & Development
Actively develop technical capability through labs, internal training, and supervised client work.
Progress toward independently executing complete test components.

Required Skills & Experience

Technical Foundation

Strong understanding of

TCP/IP, DNS, HTTP/S
Linux and Windows fundamentals
Common vulnerability classes (OWASP Top 10)

Junior Penetration Tester