Junior Penetration Tester - Immediate Joiner

Immediate joiner required.

We’re looking for a Junior Penetration Tester to join our security testing practice. You’ll support manual-first penetration testing engagements on web, mobile, infrastructure and cloud — both internally and for clients across the UAE — working alongside senior testers within formal testing governance.

Responsibilities

• Support manual and tool-assisted penetration tests across web applications, web services, mobile apps (iOS/Android) and infrastructure, under the guidance of a senior tester.
• Operate within approved rules-of-engagement / exploit-authorisation processes before any exploitation activity.
• Escalate critical findings (RCE, SQLi, and similar) immediately, outside the standard reporting cycle.
• Draft per-finding detail for reports: severity, affected assets, root cause, evidence, business impact, recommendations and mitigations.
• Maintain vulnerability registers and log findings into vulnerability management platforms.
• Retest remediated vulnerabilities and support closure reporting.
• Reproduce and explain reported vulnerabilities on request.
• QA your own work to eliminate false positives before it reaches a senior reviewer.

Requirements

• 1+ year of hands-on penetration testing experience — professional, internship, or substantial lab and CTF work.
• Practical skills in at least one of: web/API testing, mobile (iOS/Android), or network/infrastructure testing.
• Comfortable with manual testing plus tooling such as Burp Suite, Acunetix and Nmap.
• Good spoken and written English; able to explain a finding clearly to a technical audience.
• Willing to work under formal engagement governance — signed-off scopes, exploit authorisation, escalation protocols.
• Based in the UAE and available to join immediately.
• Able to travel to client sites across the UAE as required.

Qualifications

• CEH, Security+, OSCP or an equivalent recognised security certification is an advantage, not a requirement.
• Bachelor’s degree in Computer Science, Information Security, or a related field — or equivalent practical experience.
• Clean background suitable for formal verification (identity, right to work, education, employment history).