Junior Penetration Tester

SAIC

. Conduct penetration tests across client environments using black-box and white-box methodologies for web, network, and mobile targets aligned to NIST standards .

Posted 11/10/2026full-timeRemote • Texas • United StatesJuniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in conducting penetration tests using black-box and white-box methodologies, with a strong foundation in cybersecurity concepts and vulnerability assessment tools. Capable of producing clear technical documentation and presenting findings to stakeholders while maintaining compliance with industry standards.

Highest-signal resume keywords

Penetration TestingVulnerability ScanningTechnical DocumentationOWASP KnowledgeCybersecurity Certifications

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Penetration TestingVulnerability ScanningWeb Application TestingNetwork SecurityScripting in PythonScripting in BashScripting in PowerShellSource Code ReviewMobile Application TestingCybersecurity Concepts

Soft Skills

Problem-SolvingCuriosityCollaborationCommunication

Tools & Technologies

Burp SuiteTenableHack The BoxTryHackMePortSwigger Web Security Academy

Certifications & Qualifications

GWAPTOSCP

Industry Keywords

NIST StandardsOWASP Top 10Digital ForensicsCloud SecurityCJIS Clearance

Tech Stack

Tools & technologies

AndroidCloudCyber SecurityFirewallsGraphQLiOSPythonSOAP

About the role

Key responsibilities & impact

Conduct penetration tests across client environments using black-box and white-box methodologies for web, network, and mobile targets aligned to NIST standards
Manage assigned engagement tasks and workload from scoping support through final reporting
Produce technical reports documenting findings, risk context, and actionable remediation guidance
Contribute to iOS and Android application security assessments
Apply knowledge of security architectures, firewalls, network traffic, and access controls to identify weaknesses
Use commercial, government, and custom tools to scan for, identify, and validate vulnerabilities
Research and evaluate new tools, techniques, and technologies and recommend team improvements
Present findings to customers and explain business risk to leadership
Build cybersecurity and digital forensics skills through mentorship, training, and hands-on practice aligned with the NICE Framework
Share knowledge, contribute to internal tooling and methodology improvements, and help close practice skill gaps
Stay current on emerging vulnerabilities, attack techniques, and industry developments
Report to the Security Assessments Manager

Requirements

What you’ll need

Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field is preferred but not required; equivalent hands-on experience such as labs, CTFs, internships, or personal projects may be considered in lieu of a degree
Must be able to pass a CJIS Criminal Justice background investigation and maintain CJIS clearance throughout employment
Foundational knowledge of cybersecurity concepts, networking, operating systems, and common attack techniques
Working knowledge of the OWASP Web Security Testing Guide and OWASP Top 10
Hands-on familiarity with web application testing and vulnerability scanning tools such as Burp Suite and Tenable
Basic understanding of firewalls, network traffic, and access controls
Ability to write clear, organized technical documentation
Strong curiosity, problem-solving skills, and drive to keep learning
GWAPT and OSCP are strongly preferred; other listed certifications may also be considered
Exposure to mobile application testing tools and iOS or Android assessments
Familiarity with REST, GraphQL, and SOAP API security testing
Exposure to source code review for white-box testing
Experience with CTFs, bug bounty programs, home labs, or platforms such as Hack The Box, TryHackMe, or PortSwigger Web Security Academy
Basic scripting skills in Python, Bash, or PowerShell
Introductory exposure to cloud security, digital forensics, or reverse engineering
Experience presenting technical information or interest in developing this skill
Ability to work collaboratively under senior team guidance