Junior Pentester

2 weeks, 6 days ago
Full-time
Junior
Cybersecurity
Thoropass

Thoropass

Thoropass is the leading end-to-end compliance solution that offers expert guidance, thorough preparation, and a seamless security audit experience. With smart software and expert services, Thoropass helps businesses achieve and maintain information se...

Internet Software & Services
51-250
Founded 2019
$98M raised

Description

  • Perform web application, API, mobile, LLM, cloud, and network penetration tests using manual techniques and AI-assisted tools.
  • Follow OWASP Testing Guide methodologies and Thoropass internal playbooks.
  • Validate AI-generated testing results manually and assess the limitations of automated output.
  • Document vulnerabilities with reproduction steps, evidence, risk ratings, and remediation recommendations.
  • Support senior testers with scoping calls and pre-engagement preparation.
  • Improve internal testing templates, skills, plugins, MCPs, checklists, and documentation.
  • Progress toward handling more complex engagements with increasing autonomy.

Requirements

  • 1–2 years of experience in penetration testing, vulnerability assessment, or a related offensive security role; internships, freelance work, and bug bounty experience count.
  • At least one of the following certifications: BSCP or OSCP.
  • Foundational knowledge of web application security, including the OWASP Top 10, authentication and session-management flaws, and injection vulnerabilities.
  • Ability and willingness to use AI tools while manually validating their output.
  • Demonstrated security experience through self-study, labs, CTFs, bug bounties, personal projects, or relevant coursework.
  • Published security research, responsible disclosures, blog posts, or conference talks preferred.
  • Fluent English and strong professional written and verbal communication skills.
  • Curiosity, self-direction, and an attacker mindset focused on identifying and chaining vulnerabilities.

Benefits

  • Competitive base salary.
  • Exceptional private healthcare.
  • Early equity in a fast-growing company.
  • Work-from-home model with flexible PTO.
  • Structured growth path with mentorship and regular feedback.
  • Budget for training, certifications, and conferences.
  • Company-provided laptop.
  • Monthly wellness and home Wi-Fi stipend.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Senior Reverse Engineer - Remote

Zyte 251-1K Professional Services

Zyte is hiring a Reverse Engineer to develop scalable tooling, automation, and AI-assisted pipelines that help engineers analyze evolving antibot and browser-fingerprinting systems and ship solutions faster.

Burp Suite C C++ JavaScript LLM Machine Learning Node.js Python Rust Wireshark
1 day, 20 hours ago

Manager, Third-Party Risk Management (TPRM)

DoorDash 10K-50K Air Freight & Logistics

DoorDash is hiring a US-based Third-Party Risk Management Manager to lead its global vendor security risk program, manage TPRM teams, and build AI-enabled workflows across DoorDash, Wolt, and Deliveroo.

CI/CD Encryption OAuth OpenID Connect Penetration Testing Python SAML Secrets Management SQL
2 days, 19 hours ago

Incident Response Lead

Aspenview Technology Partners Internet Software & Services

AspenView Technology Partners is hiring a US-based Incident Response Lead to direct major incident response and digital forensics for a large consumer lender supported by nearshore security operations teams.

AWS Azure Elasticsearch GCP Linux SIEM Splunk
5 days, 19 hours ago

Staff Security Researcher (Europe Remote)

Invicti 251-1K Internet Software & Services

Invicti Security is hiring a hands-on Offensive Security Researcher in Europe to research emerging web, cloud, and AI threats and turn findings into accurate, production-ready detection capabilities.

Burp Suite GraphQL HTTP JavaScript Kubernetes Nmap Python REST API
5 days, 20 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers