Part Time Penetration Tester

Job Summary The Penetration Tester is an entry-level practitioner who executes scoped engagements under supervision, with the expectation of self-sustainment without supervision following the completion of a 90-day probationary period.

All Penetration testers are expected to follow Fortifieds established penetration testing methodology across network, system, and application targets.

This role is responsible for accurately and thoroughly documenting findings and outcomes for formal reports and client deliverables.

Client-facing communications are produced under supervision and reviewed by a qualified peer or the manager before delivery, ensuring quality and consistency at every stage.

The Penetration Tester develops foundational exploitation skills across a range of attack surfaces, demonstrates awareness of social engineering concepts and their role in penetration testing engagements, and is expected to actively pursue certification as a signal of professional commitment.

This role requires effective written and verbal communication, adherence to rules of engagement, and a commitment to continuous improvement in technique and documentation quality.

Essential Job Functions The following duties are normal for this position.

The omission of specific statements of duties does not exclude them from being expected of this position if the work is similar, related, or a logical assignment for this position.

Other duties may be required.

Executes scoped penetration testing engagements under supervision, including internal, external, wireless, and application targets, following Fortifieds established methodology throughout.

Produces accurate and well-documented findings including formal reports, notes, presentations, and appendices, delivered within project schedule and reviewed by an IC2 or IC3 practitioner before client submission.

Reports project performance metrics to the Penetration Testing Manager or assigned IC2/IC3 lead; flags delivery risks or blockers proactively.

Maintains foundational awareness of current network, system, and application threats, vulnerabilities, and exploitation techniques; actively develops technical depth over time.

Actively pursues relevant industry certifications; eJPT or CEH expected as an entry baseline with OSCP targeted within 18 months of hire as a near-term professional development goal.

Demonstrates working familiarity with penetration testing tools including Kali Linux, Metasploit, NMAP, Burp Suite (Community), and Nessus; continues developing proficiency through hands-on engagement work.

Applies penetration testing methodologies including OWASP, PTES, NIST SP800-115, and MITRE ATT&CK under supervision; builds understanding of how methodology selection and scope definition affect engagement outcomes.

Maintains working knowledge of networking technologies, protocols, and network functionality as they apply to penetration testing scope and attack surface analysis.

Follows Fortifieds rules of engagement and operat...