Junior Penetration Tester

SAIC is hiring a Junior Penetration Tester for offensive security engagements supporting a major state and local government customer. This role is built for hands-on growth in web application and network testing, with structured mentorship from senior testers and an emphasis on quality, documentation, and continuous learning. The position is based in Texas (remote), with a salary range of USD 60,001 - 100,000 per year.

What you’ll do

• Perform penetration testing across client environments using black box and white box approaches for web, network, and mobile targets, aligned to NIST standards.
• Own assigned tasks and workload within engagements, from scoping support through final reporting, supported by guidance and a consistent focus on quality.
• Validate vulnerabilities and communicate results through clear, well-structured technical reports that include findings, risk context, and actionable remediation guidance.
• Support iOS and Android application security assessments, with room to expand your mobile testing capabilities over time.
• Apply knowledge of security architectures, firewalls, network traffic, and access controls to identify and assess weaknesses.
• Use COTS, GOTS, and custom tools to scan for, identify, and validate vulnerabilities.
• Contribute to research and evaluation of new tools, techniques, and technologies, recommending improvements to the team.
• Strengthen your ability to present findings, including walking stakeholders through vulnerability chains and explaining business risk to leadership.
• Align development with the NICE Framework and build foundational skills in cybersecurity and digital forensics through mentorship, training, and hands-on practice.
• Share learnings with teammates and help improve internal tooling and methodology, supporting skill gap closure across the practice.
• Stay current on emerging vulnerabilities, attack techniques, and industry developments, and bring that knowledge back to the team.

What you’ll need

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field is preferred (not required).
• Equivalent hands-on experience (such as labs, CTFs, internships, or personal projects) may be considered in lieu of a degree.
• Ability to pass a CJIS Criminal Justice background investigation and maintain CJIS clearance throughout employment.
• Foundational knowledge of cybersecurity concepts, including networking, operating systems, and common attack techniques.
• Working knowledge of OWASP Web Security Testing Guide (WSTG) and OWASP Top 10, including how to identify and exploit common vulnerabilities in practical or lab settings.
• Hands-on familiarity with standard web application testing and vulnerability scanning tools (e.g., Burp Suite and Tenable).
• Basic understanding of network security concepts such as firewalls, network traffic, and access controls.
• Ability to write clear, organized technical documentation and incorporate feedback to improve report quality.
• Strong curiosity, problem-solving skills, and drive to keep learning.
• GWAPT and OSCP are strongly preferred.
• Candidates holding or actively pursuing PNPT, PenTest+, PJPT, eJPT, OSEP/OSWE/OSED, or GWEB will also be considered.

Technologies you may use

NIST, OWASP Web Security Testing Guide (WSTG), OWASP Top 10, NICE Framework, Burp Suite, Tenable, iOS, Android, COTS, GOTS, GWAPT, OSCP, PNPT, PenTest+, PJPT, eJPT, OSEP, OSWE, OSED, GWEB

Preferred experience

• Exposure to mobile application testing concepts and tools such as Frida, Objection, MobSF, and ADB, plus hands-on iOS or Android assessment experience.
• Familiarity with API security testing (REST, GraphQL, SOAP).
• Exposure to source code review as part of white box testing.
• Experience with CTFs, bug bounty programs, home labs, or platforms such as Hack The Box, TryHackMe, or PortSwigger Web Security Academy.
• Basic scripting skills (e.g., Python, Bash, PowerShell) to automate tasks.
• Introductory exposure to cloud security concepts, digital forensics, or reverse engineering.
• Experience presenting technical information to peers or stakeholders, or interest in developing that skill.
• Ability to work collaboratively under guidance from senior team members.