Associate Penetration Tester - Network Security

Evolve Security

13d•Hybrid

About The Position

This is an entry-level role for aspiring penetration testers who have a solid foundation in IT/security and are eager to learn from an amazing group of offensive security professionals. Associate Testers work under the guidance of more experienced team members to deliver network and cloud assessments. The focus at this stage is on building core skills, learning methodologies, tools, and reporting standards of the team. Associates utilize their system administration skills support for the team with vulnerability scanning, configuration assessments, and testing infrastructure improvements while developing the skills necessary to become a penetration tester.

Requirements

Understanding of IP addressing, subnetting, gateways, DNS, and DHCP
Basic knowledge of firewalls and how to allow/deny traffic using ports and protocols (TCP/UDP)
Understanding of vulnerability and configuration management.
Configuring and troubleshooting VPN clients (IPSec, SSL VPN)
Navigating cloud portals, launching virtual machines, and assigning security groups
Understanding basic IAM concepts like users, roles, and policies
Configuring and troubleshooting internal and external DNS zones
Managing S3 buckets (AWS) or Blob Storage (Azure)
Understanding access permissions and basic data lifecycle policies
Using cloud-native tools (e.g., CloudWatch, Azure Monitor) to track uptime, performance, and security events
Basic Scripting for Automation
Practical knowledge of networking fundamentals and configuration and vulnerability management.
Able to run port scans and network mapping (using tools like Nmap) and identify simple misconfigurations.
Familiar with fundamental protocols (TCP/IP, DNS, HTTP, etc.) and aware of common network attack vectors (e.g. open ports, default credentials).
This position is eager to learn and receptive to feedback.
Capable of documenting findings and drafting portions of reports, though these will be reviewed by seniors.
Beginning to develop communication skills – for example, can explain a discovered vulnerability clearly to the team and is learning to tailor explanations to non-technical audiences.
Demonstrates professionalism, ethical conduct, and knows when to ask questions or seek help.
Teamwork is important; junior members are expected to collaborate and take direction well.