About Careertakes

👉 Important disclosure: Careertakes is a third-party recruiting platform supporting this hiring process. If selected, you will be employed directly by our client, Part time.

Applicants for this role may also receive access to additional matched opportunities through the Careertakes platform.

---

What You’ll Do

This position is an entry-level penetration tester role working on scoped engagements under supervision. Responsibilities include:

• Execute scoped penetration tests across internal, external, wireless, and application targets following established methodologies.
• Document findings thoroughly and produce client deliverables (reports, notes, presentations, appendices) on schedule.
• Work under IC2/IC3 or manager supervision for review of technical findings and client-facing communications until independence is confirmed.
• Track and report project performance metrics; flag delivery risks and blockers proactively.
• Maintain and develop foundational knowledge of current threats, vulnerabilities, and exploitation techniques.
• Use and improve proficiency with tools like Kali Linux, Metasploit, NMAP, Burp Suite (Community), and Nessus.
• Apply methodologies such as OWASP, PTES, NIST SP800-115, and MITRE ATT&CK as appropriate to scope and client needs.
• Maintain clear communication with assigned leads during engagements; provide routine status updates as directed.
• Accurately submit time and maintain detailed engagement notes and customer interaction records.
• Support social engineering components within defined scope and follow rules of engagement to minimize client impact.
• Book travel per company/client policy and work occasional evenings or weekends as required.

---

What You’ll Bring

Minimum qualifications and skills required:

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or equivalent hands-on experience.
• Minimum ~2 years of security or IT experience; lab-based experience and CTF participation accepted at entry level.
• Required baseline certification: eJPT or CEH. OSCP is strongly preferred and expected to be actively pursued within ~18 months of hire.
• Practical familiarity with Kali Linux, Metasploit, Burp Suite (Community), and Nessus; experience with NMAP.
• Basic scripting ability in Python, Bash, or PowerShell for automation and troubleshooting.
• Solid understanding of networking, topology, OSI model, and common protocols.
• Working knowledge of OWASP and other testing methodologies and how scope affects outcomes.
• Strong written and verbal communication skills; ability to work professionally with clients, vendors, and internal teams.
• Problem-solving, initiative, and the ability to protect confidential information.

Preferred / helpful experience:

• Healthcare IT experience (a plus).
• Hands-on exposure to vulnerability exploitation techniques and practical lab work.

---

Compensation & Schedule

• Estimated compensation: $59,791 per year (estimated).
• Employment type (as listed): Full time, Permanent.
• Evenings and weekend hours should be anticipated. Travel as needed.

---

Professional Development & other notes

• The role expects active pursuit of industry certifications (eJPT or CEH required at entry; OSCP targeted within ~18 months).
• Work will be supervised initially with progressive independence based on performance and readiness.
• Confidential Client supports reasonable accommodations in compliance with the Americans with Disabilities Act; request accommodations through People/HR.

---

Equal Opportunity & Hiring Transparency

Careertakes and our client are Equal Opportunity Employers committed to building a diverse and inclusive workforce. We prohibit discrimination or harassment of any kind. To support a fair and efficient hiring process, AI tools may be used to assist with application review or resume screening. These tools do not replace human decision-making. Final hiring decisions are made by people.

If you have questions about how your data is used, please contact us directly.