> Markdown version of [/jobs/ext/3003853-junior-penetration-tester](https://www.wearedevelopers.com/jobs/ext/3003853-junior-penetration-tester). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Junior Penetration Tester

- **Company:** Eliassen Group
- **Location:** Carson City, NV, United States (Remote available)
- **Experience:** Starter
- **Salary:** $62,400.0 - $83,200.0
- **Contract:** Permanent contract
- **Skills:** Software System Penetration Testing, Automation of Tests, Burp Suite, Cloud Engineering, Computer Networks, Custom Software, Mobile Application Software, Network Security, Open Web Application Security, Web Applications, Information Technology, Nessus, CIS Benchmarks, Qualys, Vulnerability Analysis
- **Published:** September 19, 2026
- **Apply:** https://dejobs.org/x/x/976C030B194240F0A3C712965C3824F3/job/

## About the Role

Due to federal security clearance requirements, applicant must be a United States Citizen or Permanent Resident with ability to obtain Public Trust clearance. Applicants must be willing and able to work on a w2 basis. For our w2 consultants, we offer a great benefits package that includes Medical, Dental, and Vision benefits, 401k with company matching, and life insurance., * Knowledge and experience with manual host testing per CIS benchmarks.

 * Strong knowledge of and experience with Burp Suite.
 * Strong knowledge of and experience with Qualys.
 * 3+ years of experience in the information technology field.
 * Knowledge of and experience with Nessus.
 * Knowledge of OWASP Top 10.
 * Some penetration testing experience.
 * Preferred tools: Acunetix, AppDetective, DbVisualizer.
 * Knowledge of NIST Special Publications and NIST Risk Management Framework.
 * Knowledge of computer networking concepts, protocols, and network security methodologies.
 * Strong attention to detail.

Education Requirements:

Education : Bachelor's Degree in a STEM field preferred. Certification: Industry standard certification (e.g., Security+) strongly preferred. Clearance: Ability to obtain and maintain a Public Trust required.

## Description

* Conduct security testing of IT assets, web applications, infrastructure, mobile applications, custom software, virtual technologies, COTS products, cloud implementations, common application platforms, and other technologies connecting to or interacting with the Judiciary network.
 * Develop and maintain a repeatable methodology for performing security testing, including threat modeling, mapping business requirements to applicable security requirements, determining appropriate security controls, and defining test scenarios and test cases.
 * Develop Security Test Plans.
 * Perform security testing, vulnerability analysis, and risk analysis using an industry-proven, repeatable methodology.
 * Evaluate the effectiveness of security controls for the systems tested.
 * Relate test results to controls in NIST SP 800-53, as reflected in the JISF.
 * Develop, maintain, and use customized testing scripts to support testing automation.
 * Develop and deliver required reports.


## Related Videos

- [How to Cause (or Prevent) a Massive Data Breach- Secure Coding and IDOR](https://www.wearedevelopers.com/videos/39-how-to-cause-or-prevent-a-massive-data-breach-secure-coding-and-idor)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [It's a (testing) trap! - Common testing pitfalls and how to solve them](https://www.wearedevelopers.com/videos/1193-it-s-a-testing-trap-common-testing-pitfalls-and-how-to-solve-them)
- [Securing Your Web Application Pipeline From Intruders](https://www.wearedevelopers.com/videos/53-securing-your-web-application-pipeline-from-intruders)

## Related Articles

- [The 8 Best Code Testing Tools](https://www.wearedevelopers.com/magazine/402-the-8-best-code-testing-tools)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)
- [Should senior developers refuse interview coding challenges?](https://www.wearedevelopers.com/magazine/29-should-senior-developers-refuse-interview-coding-challenges)