Junior Penetration Tester

About Rhymetec

Rhymetec was founded in New York City in 2015 and has grown steadily in the areas of compliance, cyber security, and data privacy. Our mission is to ensure our clients are compliant faster so they can focus on their core business and less on the complexities of building effective and compliant infosec programs.

Role and Responsibilities

• Conduct vulnerability scans using tools such as Nuclei, Nessus, and other scanning technologies.
• Perform external network penetration tests to identify and exploit security weaknesses.
• Execute web application penetration tests using Burp Suite Pro and other relevant tools.
• Analyze test results, document findings, and provide comprehensive reports to stakeholders.
• Collaborate with senior penetration testers to develop and refine testing methodologies.
• Stay current with industry trends, emerging threats, and best practices in cybersecurity.
• Assist in developing remediation strategies and recommendations based on findings.
• Participate in team meetings, training sessions, and knowledge-sharing initiatives.
• Conduct customers meetings to review all findings on pen test reports.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field (or equivalent practical experience).
• 0-2 years of hands-on experience in penetration testing, vulnerability assessment, or a related field.
• Familiarity with penetration testing tools such as Nessus, Burp Suite Pro, Nmap, and other related software.
• Basic understanding of networking protocols, web applications, and security principles.
• Strong analytical and problem-solving skills with a keen attention to detail.
• Ability to communicate complex technical issues clearly and effectively, both verbally and in writing.
• Relevant certifications (e.g., CompTIA Security+, CEH, OSCP) are a plus but not required.

Bonus Qualifications

• Currently ranked at “Hacker” or higher on HackTheBox.
• Top ten percent on TryHackMe.
• Public github where custom tools, scripts, note taking, etc. is documented.
• Personal information security, or IT related blog documenting interests and personal projects.
• A home lab, or testing environment used to test, deploy, and better understand prevailing technologies and industry standards.