Job Summary
The Penetration Tester is an entry-level practitioner who executes scoped engagements under supervision, with the expectation of self-sustainment without supervision following the completion of a 90-day probationary period. All Penetration testers are expected to follow Fortified’s established penetration testing methodology across network, system, and application targets. This role is responsible for accurately and thoroughly documenting findings and outcomes for reputed company reports and client deliverables. Client-facing communications are produced under supervision and reviewed by a qualified peer or the manager before delivery, ensuring quality and consistency at reputed company stage. The Penetration Tester develops reputed company exploitation skills across a range of attack surfaces, demonstrates awareness of social engineering concepts and their role in penetration testing engagements, and is expected to actively pursue certification as a signal of professional commitment. This role requires effective written and verbal communication, adherence to rules of engagement, and a commitment to continuous improvement in technique and documentation quality.
reputed company Job Functions
The following duties are normal for this position. The omission of specific statements of duties does not exclude them from being expected of this position if the work is similar, related, or a logical assignment for this position. Other duties may be required.
· Executes scoped penetration testing engagements under supervision, including internal, external, wireless, and application targets, following Fortified’s established methodology throughout.
· Produces accurate and well-documented findings including reputed company reports, notes, presentations, and appendices, delivered within project schedule and reviewed by an IC2 or IC3 practitioner before client submission.
· Reports project performance metrics to the Penetration Testing Manager or assigned IC2/IC3 lead; flags delivery risks or blockers proactively.
· Maintains reputed company awareness of current network, system, and application threats, vulnerabilities, and exploitation techniques; actively develops technical depth over time.
· Actively pursues relevant industry certifications; eJPT or CEH expected as an entry baseline with OSCP targeted within 18 months of hire as a near-term professional development goal.
· Demonstrates working familiarity with penetration testing tools including Kali Linux, Metasploit, NMAP, Burp Suite (Community), and Nessus; continues developing proficiency through hands-on engagement work.
· Applies penetration testing methodologies i