Penetration Tester Junior

Company Description INTRUST SECURITY is a specialized cybersecurity company focused on strengthening the path to success for small and medium-sized businesses. Our services provide comprehensive protection against evolving cyber threats, including penetration testing as a service, vulnerability analysis, and vulnerability management. We also support clients with brand monitoring, attack surface assessment, and web application security. Additionally, we offer ethical hacking in corporate environments and darknet-related security services to help organizations proactively identify and mitigate risks.

Role Description The Penetration Tester Junior role is a full-time, hybrid position based in the Medellín Metropolitan Area, with some flexibility to work from home. This role involves assisting in planning and executing penetration tests on networks, systems, and web applications under the guidance of senior team members. The Penetration Tester Junior will help identify, document, and validate vulnerabilities, support vulnerability management activities, and contribute to security assessments related to brand monitoring and attack surface analysis. Day-to-day tasks include preparing test plans, running security tools, analyzing results, drafting clear reports, and collaborating with colleagues to recommend remediation steps. The role also includes continuous learning, staying current with cybersecurity trends, and participating in ethical hacking exercises in corporate environments.

Qualifications

• Foundational skills in penetration testing and vulnerability assessment, including basic knowledge of common tools and methodologies.
• Understanding of network and system security concepts, such as TCP/IP, firewalls, operating systems, and secure configurations.
• Awareness of web application security principles, including typical attack vectors, OWASP Top 10, and secure coding practices.
• Ability to analyze security findings, document technical details clearly, and prepare structured reports for technical and non-technical stakeholders.
• Strong problem-solving mindset, attention to detail, and commitment to ethical hacking and responsible disclosure practices.
• Comfort working in a hybrid environment, with good time management, collaboration, and communication skills.
• Relevant studies or certifications in cybersecurity, computer science, or related fields (e.g., OSCP, eJPT, CompTIA Security+) are a plus.
• Intermediate or higher proficiency in English and Spanish, and willingness to learn new tools and techniques in a fast-evolving field.