Junior Penetration Tester - Offensive Security (Remote, Full-Time)

Position Overview Title: Junior Penetration Tester Job Classification: Full-time Employee, Non-Supervisory, Exempt Benefits: Full Total Rewards Package (see Total Rewards Overview) Work Location: United States - Virtual Role Compensation: $68K to $83K per year, commensurate with experience Requirements: Background check required Start Date: ASAP Position Summary The Junior Penetration Tester is responsible for performing hands-on penetration testing activities for SecurIT360 clients across a variety of environments. This role may require work during nights, weekends, and standard business hours, depending on client engagement needs. Work is performed under the guidance and mentorship of Senior Penetration Testers. In addition to technical execution, this role requires regular interaction with client stakeholders before, during, and after engagements. The Junior Penetration Tester is expected to communicate clearly, professionally, and confidently with both technical and non-technical audiences to support successful project outcomes. This position contributes to client security outcomes by: • Identifying exploitable vulnerabilities across networks, applications, systems, and environments • Validating real-world security risks through ethical exploitation techniques • Translating technical findings into clear business risk and impact for client stakeholders • Delivering accurate, actionable reporting that supports risk reduction and remediation • Supporting consistent testing methodologies, tooling, and documentation This is a hands-on growth role designed to build both offensive security expertise and client-facing consulting skills ---------------------------------------------------------------------------------- Why This is Not Your Normal Job The Next S-Curve Of Growth After SecurIT360’s inception in 2009, David Forrestall (CISSP, CISA), the founder, invested heavily into creating a trustworthy and reliable brand, building a foundation for growth, and establishing the firm as a Center of Excellence in the cybersecurity space. SecurIT360 has experienced rapid growth since, resulting in new clients, new team members and an enviable track record of performance. The firm is now prepared to drive the next S-curve of growth and create new opportunities in response to growing customer demand and a rapidly changing marketplace. The convergence of an exploding demand for cyber protection services, increasing threats, and the rapid evolution of AI-based tools and weapons have exploded the demand for cyber security solutions. This is more than a job. It is an opportunity to join at a critical inflection point and to share in the rewards of exponential growth while contributing to an organization recognized as an innovative and trusted cybersecurity partner. • This is definitely NOT just a Job. • This Position is much more than a Career. • This is an Opportunity to fulfill a personal and professional Mission. About SecurIT360 Founded in 2009 by David Forrestall, SecurIT360 is a full-service cybersecurity and compliance consulting firm headquartered in Birmingham, Alabama. Our team of credentialed professionals is dedicated to delivering vendor-agnostic solutions tailored to each client's unique needs. We specialize in assessments, penetration testing, compliance, monitoring, incident response, and managed services. At SecurIT360, we prioritize developing programs and systems that empower our clients to enhance their security posture and achieve regulatory compliance. ---------------------------------------------------------------------------------- Our Purpose, Mission & Vision Purpose Fighting Evil (which impacts lives) Mission We are an organization focused on people. Our mission is to serve others professionally and personally while growing industry-leading experts who fight evil. • We do the right thing. • We build relationships. • We serve. Vision Our Vision is to be… • Among the most highly trusted, respected, and evangelized cybersecurity companies on the planet. • A multi-disciplined team of experts, masters of our craft, lifelong learners, that mentor and grow the next generation. • A beacon of excellence that draws others into a caring community that has a meaningful impact on all it encounters ---------------------------------------------------------------------------------- Meet Your Success Support Team Your Success Support Team is comprised of, Executive & Leadership Guidance Your primary strategic support comes from our Vice President of Offensive Security, who will serve as your executive mentor and direct leader. You will engage in regular one-on-one sessions during your first 90 days to ensure alignment with our organizational priorities. SecOps Team Members You will work alongside a multi-disciplined team of cybersecurity subject matter experts analysts, engineers, penetration testers, and compliance specialists – who execute client- facing projects with precision, creativity, and a relentless focus on results. ---------------------------------------------------------------------------------- Key Duties and Responsibilities Key Objective Perform a variety of penetration tests (internal, external, web application, physical, mobile, etc.) for SecurIT360 clients and assist senior penetration testers in providing deliverables to clients. Penetration Testing Execution • Perform remote and on-site penetration testing as required • Assist Senior Penetration Testers on complex or multi-phase engagements • Execute approved testing methodologies for network, application, wireless, and infrastructure assessments • Validate vulnerabilities using safe, controlled exploitation techniques • Maintain strict adherence to scopes of work, rules of engagement, and client authorization • Support specific attack paths, testing phases, or validation tasks during larger engagements Threat Awareness & Technical Development • Maintain awareness of current and historical threats and communicate relevant risks internally and to clients when appropriate • Continuously evaluate tools and techniques to ensure testing aligns with industry-accepted practices • Actively develop offensive security skills through hands-on testing, labs, and certification maintenance • Research emerging exploits, tools, and adversary techniques relevant to client environments • Build proficiency in enumeration, exploitation, post-exploitation, and basic scripting Reporting & Documentation • Create clear, well-structured penetration testing reports using SecurIT360 templates • Document vulnerabilities with reproducible steps, supporting evidence, business risk context, and remediation guidance • Ensure findings are technically accurate, clearly explained, and aligned with industry best practices • Participate in peer reviews of penetration testing reports Client Communication & Stakeholder Engagement • Participate in pre-engagement, during-engagement, and post-engagement meetings with client stakeholders • Communicate testing activities, timelines, scope considerations, and status updates professionally • Assist in explaining penetration testing methodology, scope, and results to non-technical audiences • Translate technical findings into business-relevant risk and impact discussions • Demonstrate professional presence, discretion, and situational awareness in all client interactions • Support expectation management related to scope, timelines, and deliverables Process Improvement & Cross-Functional Support • Assist in developing and refining standard operating procedures and attack playbooks • Support Sales and presales efforts with offensive security expertise as needed • Provide technical input during solution design and client discussions • Collaborate with other service lines when required ---------------------------------------------------------------------------------- Capabilities, Skills & Competencies Technical Capabilities • Foundational understanding of networking concepts (TCP/IP, DNS, routing, firewalls) • Working knowledge of Windows and Linux operating systems • Familiarity with web technologies (HTTP/S, APIs, authentication mechanisms) • Experience with common penetration testing tools (Nmap, Burp Suite, Metasploit, Nessus, Wireshark) • Basic scripting or automation skills (Python, Bash, or PowerShell preferred) Analytical & Cognitive Skills • Logical and methodical approach to identifying and validating security weaknesses • Ability to correlate technical findings to real-world business risk • Strong troubleshooting and problem-solving mindset • High attention to detail during testing and reporting Professional & Interpersonal Competencies • Strong written and verbal communication skills • Comfort engaging in client-facing discussions and meetings • Ability to build trust and credibility with client stakeholders • Clear, confident communication with both technical and non-technical audiences • Strong listening skills and situational awareness • Ability to receive feedback and apply it constructively • Effective time management in a consulting-driven environment ---------------------------------------------------------------------------------- Required Qualifications • 0–2 years of experience in IT roles such as Help Desk, Desktop Support, System Administration, or equivalent hands-on training • Active CompTIA PenTest+ certification or an equivalent hands-on offensive security certification • Demonstrated interest in offensive security and ethical hacking • Ability to communicate technical findings clearly to client stakeholders • Willingness and ability to work nights, weekends, and flexible schedules Preferred Education & Experience • Associate’s or Bachelor’s degree in Information Technology, Cybersecurity, or a related field (preferred) • Hands-on experience through labs, CTFs, bug bounty programs, or home lab environments • Prior exposure to vulnerability scanning, security assessments, or IT operations Job Type: Full-time Pay: $68,000.00 - $83,000.00 per year Benefits: • 401(k) • Dental insurance • Health insurance • Life insurance • Paid time off • Vision insurance Application Question(s): • Please list any hands-on offensive security certifications you currently hold that are comparable to CompTIA PenTest+ (include certification name and issuing organization). • This role may require work during nights, weekends, or non-standard hours based on client needs. Are you willing and able to work a flexible schedule? Experience: • penetration testing: 1 year (Preferred) Work Location: Remote