Junior Penetration Tester

HexVanta (Private) Limited is seeking a motivated Junior Penetration Tester to join its cybersecurity team based in Islamabad. This role is ideal for fresh graduates or early-career professionals with a keen interest in offensive security and a foundational understanding of cybersecurity principles. The successful candidate will gain practical experience by participating in real-world security assessments under the mentorship of seasoned security experts. This position offers an excellent opportunity to develop hands-on skills in penetration testing and vulnerability analysis within a dynamic and supportive environment.

Key Responsibilities
- Assist in performing penetration tests on web applications, APIs, networks, and infrastructure components.
- Identify, validate, and document security vulnerabilities accurately.
- Conduct reconnaissance, enumeration, vulnerability assessments, and controlled exploitation activities.
- Utilize security testing tools such as Burp Suite, Nmap, Metasploit, Wireshark, and other relevant utilities.
- Test applications against the OWASP Top 10 and other common security weaknesses.
- Prepare clear, professional vulnerability reports detailing technical findings, risk impacts, and remediation recommendations.
- Support senior penetration testers during complex security engagements and projects.
- Participate in internal security research initiatives, labs, Capture The Flag (CTF) challenges, and continuous learning activities.
- Stay informed about emerging vulnerabilities, attack techniques, tools, and cybersecurity trends.

Required Qualifications
- Solid understanding of networking concepts including TCP/IP, HTTP/HTTPS, DNS, and Linux operating systems.
- Basic knowledge of web application and API security principles.
- Familiarity with common vulnerabilities such as SQL Injection, Cross-Site Scripting (XSS), Insecure Direct Object References (IDOR), Server-Side Request Forgery (SSRF), authentication flaws, and access control weaknesses.
- Hands-on experience with penetration testing tools like Burp Suite and Nmap or similar utilities.
- Basic scripting skills in Python, Bash, or PowerShell are advantageous.
- Exposure to platforms such as Hack The Box, TryHackMe, PortSwigger Academy, or participation in CTFs and personal cybersecurity labs is highly preferred.
- Strong analytical and problem-solving abilities.
- Good written communication skills, particularly in technical documentation.
- Demonstrated eagerness to learn and grow within the field of offensive security.

Preferred Qualifications and Benefits
While certifications are considered a plus, HexVanta places greater emphasis on practical skills, curiosity, and a strong security mindset. Fresh graduates and candidates with demonstrable hands-on cybersecurity experience are strongly encouraged to apply. This role offers the chance to work alongside experienced professionals, gain exposure to diverse security challenges, and develop a career in offensive security within a supportive and growth-oriented company.

Job Title: Junior Penetration Tester
Company: HexVanta (Private) Limited
Location: Islamabad
Job Type: Full-Time