Junior Penetration Tester/Associate Security Engineer

TechMagic

14d•Remote

About The Position

We are looking for a Junior Penetration Tester / Associate Security Engineer with 1-2 years of commercial experience in web and network penetration testing to join our security team and help embed security across the full delivery process.

Requirements

1–2 years of commercial experience in web/network penetration testing
Cybersecurity certification: CEH, eJPT, BSCP, eWPT, PJPT or equivalent
Familiarity with OWASP projects: API Security Top 10, Web Top 10, WSTG, ASVS, Cheat Sheet Series
Knowledge of AI/LLM-specific attack vectors — prompt injection, indirect injection, jailbreaking, data leakage, excessive agency (OWASP Top 10 for GenAI Applications 2025)
Hands-on experience with security tooling: Burp Suite, OWASP ZAP, SonarQube, Snyk, OpenVAS or similar
Proven experience administrating Linux and Windows operating systems
Solid understanding of how the web works: HTTP(S), HTML, CSS, AJAX
Hands-on knowledge of at least two programming languages (JS, TS, Python, Java, Go) plus bash scripting
Practical use of AI assistants (Claude, ChatGPT, Gemini) in testing workflows, payload generation and report drafting
Strong self-management, attention to detail and report-writing skills
English — at least Intermediate
Strong motivation and a genuine drive to learn new technologies and techniques

Nice To Haves

AI red teaming tools — Garak, PyRIT
Participation in AI-focused CTFs or bug bounty programmes
Secure code review skills
Cloud experience with AWS, GCP or Azure
Mobile and cloud pentesting skills

Responsibilities

Conduct penetration tests of web applications, networks, AI-powered applications, mobile applications and cloud workloads
Perform manual security testing of new and existing application functionality
Write detailed penetration test reports based on testing results
Maintain and run automated vulnerability scans of web applications and networks (Burp Suite, OWASP ZAP, Nuclei, SonarQube, Snyk, OpenVAS)
Help project teams build a Secure SDLC and integrate security testing into their delivery process
Drive and advocate security across the full SDLC
Work closely with development teams so that detected vulnerabilities are correctly understood, prioritised and mitigated
Ensure vulnerabilities are properly escalated and communicated between team members
Raise security awareness through internal training and knowledge sharing