Junior Penetration Tester | [Y-419]

CyberProof is a cyber security services and platform company whose mission is to help our customers react faster and smarter – and stay ahead of security threats, by creating secure digital ecosystems. CyberProof automates processes to detect and prioritize threats early and respond rapidly and decisively. CyberProof is part of the UST family. Some of the world's largest enterprises trust us to create and maintain secure digital ecosystems using our comprehensive cyber security platform and mitigation services. We're seeking a passionate Junior Penetration Tester to join our team. You will be responsible for assisting in identifying and addressing security vulnerabilities in various computer networks, systems, and applications.

This role involves conducting vulnerability assessments, simulating cyberattacks, and collaborating with senior security professionals to help secure an organization's digital assets.

Main tasks and Accountabilities:

1. Perform vulnerability scans and basic penetration testing on networks, web applications, mobile applications, and other systems.
2. Identify common vulnerabilities (e.g., OWASP Top 10) and misconfigurations in IT infrastructure.
3. Participate in penetration testing exercises under the guidance of senior pentesters.
4. Utilize automated tools and manual techniques to exploit potential vulnerabilities.
5. Document identified vulnerabilities, potential impacts, and recommended mitigation strategies.
6. Help prepare detailed reports for senior team members and stakeholders, including technical staff and management.
7. Update and manage penetration testing tools and software.
8. Assist in setting up and maintaining test environments.
9. Keep up to date with the latest security threats, tools, and techniques.
10. Participate in training sessions, certifications, and knowledge-sharing activities.

What do we expect from you?

1. Familiarity with basic networking concepts, operating systems (Windows, Linux), and programming/scripting languages (Python, Bash, etc.).
2. Understanding of common vulnerabilities and security testing methodologies.
3. Exposure to penetration testing tools (e.g., Nmap, Burp Suite, Metasploit, Wireshark).
4. Analytical thinking and problem-solving skills.
5. Strong written and verbal communication skills for reporting findings.
6. Eagerness to learn and adapt to new cybersecurity challenges.
7. Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field (or equivalent experience).
8. Certifications (nice to have): CompTIA Security, Certified Ethical Hacker (CEH), or equivalent.
9. Some hands-on experience through internships, labs, or personal projects is a plus.

What do we offer?

1. 23 days of Annual Leave plus the 24th and 31st of December as discretionary days.
2. Remote work within Spain. Preferred location Barcelona as part of the team is in Barcelona and so you could benefit from different team building activities that we do in the team.
3. Numerous benefits (Health Care Plan, teleworking compensation, Life and Accident Insurances).
4. 'Retribución Flexible' Program: (Meals, Kinder Garden, Transport, online English lessons, Health Care Plan…)
5. Free access to several training platforms.
6. Professional stability and career plans.
7. Referral program.
8. The option to pick between 12 or 14 payments along the year.
9. Real Work Life Balance measures (flexibility, WFH or remote work policy, compacted hours during summertime…).