ZipRecruiter

Log In

1

Junior Penetration Testing Jobs (NOW HIRING)

JPMorganChase

Senior Penetration Tester

Tampa, FL

$152K - $260K/yr

Plan, scope, and execute penetration testing engagements across a variety of environments ... Experience conducting peer reviews of penetration test reports and mentoring junior testers.

BreachLock

Senior Penetration Tester (US)

Execute web application, API and mobile penetration tests with a focus on manual testing beyond ... Mentor junior testers through technical guidance and finding review * Collaborate with delivery ...

Infojini Inc

Penetration Tester

Columbia, SC

May coach more junior technical staff. General Characteristics: Integrally involved in the ... PERFORM PENETRATION TESTING ON SCDOT PUBLIC FACING WEBPAGES AND VULNERABILITY SCANNING ON EXTERNAL ...

Infojini Inc

Penetration Tester

Columbia, SC

May coach more junior technical staff. General Characteristics: Integrally involved in the ... Perform penetration testing on public facing webpages and vulnerability scanning on external and ...

next page

Showing results 1-20

All JobsPenetration Testing JobsJunior Penetration Testing Jobs

Junior Penetration Testing information

See salary details

$33.5K

$71.8K

$109.5K

How much do junior penetration testing jobs pay per year?

As of Jul 13, 2026, the average yearly pay for junior penetration testing in the United States is $71,799.00, according to ZipRecruiter salary data. Most workers in this role earn between $48,500.00 and $80,000.00 per year, depending on experience, location, and employer.

What is the difference between Junior Penetration Testing vs Security Analyst?

AspectJunior Penetration TestingSecurity Analyst
CertificationsOSCP, CEH (entry-level)CompTIA Security+, CISSP (entry-level)
Work EnvironmentHands-on testing, simulated attacksMonitoring, incident response, policy development
Employer UsageCybersecurity firms, IT departmentsOrganizations, government agencies, corporations

Junior Penetration Testers focus on identifying vulnerabilities through simulated attacks, requiring technical certifications like OSCP or CEH. Security Analysts monitor security systems, analyze threats, and develop security policies, often holding certifications like Security+ or CISSP. While both roles are vital in cybersecurity, Junior Penetration Testers are more hands-on with testing, whereas Security Analysts focus on ongoing security monitoring and response.

What are some common challenges a Junior Penetration Tester might face during client engagements, and how can they overcome them?

Junior Penetration Testers often encounter challenges such as limited access to systems, incomplete documentation, or unclear testing scopes during client engagements. Communication is key—regularly clarifying objectives with clients and senior team members helps ensure the testing process stays on track. Additionally, adapting quickly to diverse IT environments and staying current with the latest security tools and techniques are essential. Seeking mentorship from experienced colleagues and leveraging collaborative team structures can greatly enhance learning and confidence in overcoming these hurdles.

What are the key skills and qualifications needed to thrive as a Junior Penetration Tester, and why are they important?

To thrive as a Junior Penetration Tester, you need a solid understanding of networking, operating systems, cybersecurity fundamentals, and preferably a relevant degree or certification such as CompTIA Security+ or CEH. Familiarity with tools like Metasploit, Burp Suite, Nmap, and Kali Linux is typically required to identify and exploit vulnerabilities. Strong analytical thinking, attention to detail, and clear communication help you convey technical findings to both technical and non-technical stakeholders. These skills and qualifications are essential to effectively assess security risks and support organizations in strengthening their defenses against cyber threats.

What are Junior Penetration Testers?

Junior Penetration Testers are entry-level cybersecurity professionals who assist in identifying and exploiting vulnerabilities in computer systems, networks, and applications. They work under the guidance of experienced penetration testers to conduct security assessments, perform vulnerability scans, and document findings. Their main goal is to help organizations strengthen their security by simulating real-world attacks and providing recommendations for remediation. Junior Penetration Testers often use a variety of tools and follow industry best practices to ensure thorough testing. This role is crucial for organizations looking to protect sensitive data and maintain robust security defenses.
More about Junior Penetration Testing jobs
What cities are hiring for Junior Penetration Testing jobs? Cities with the most Junior Penetration Testing job openings:
What are the most commonly searched types of Penetration Testing jobs? The most popular types of Penetration Testing jobs are:
What states have the most Junior Penetration Testing jobs? States with the most job openings for Junior Penetration Testing jobs include:
What job categories do people searching Junior Penetration Testing jobs look for? The top searched job categories for Junior Penetration Testing jobs are:
Junior Penetration Testing jobs near you
Infographic showing various Junior Penetration Testing job openings in the United States as of July 2026, with employment types broken down into 83% Full Time, and 17% Contract. Highlights an 100% In-person job distribution, with an average salary of $71,799 per year, or $34.5 per hour.
Senior Penetration Tester

Senior Penetration Tester

JP Morgan Chase

Tampa, FL

Full-time

Medical, Retirement

Re-posted 4 days ago

JPMorgan Chase & Co. rating

8.0

Company rating: 8.0 out of 10

Based on 491 frontline employees who took The Breakroom Quiz

58th of 149 rated banks

Job description

This position is also open in the following locations: New York, NY / Atlanta, FL / Plano, TX / Columbus, OH / McLean, VA / Wilmington, DE / Jersey City, NJ / Chicago, IL / Brooklyn, NY / Houston, TX

Drive the security of critical banking applications and platforms through hands-on offensive testing.

As an Assessments & Exercises Vice President in the Cybersecurity and Technology Controls organization, you will play a key role in safeguarding the firm's most vital assets. Your primary responsibility will be to plan, execute, and report on penetration tests targeting high-impact applications, platforms, and services. Leveraging industry-standard methodologies and advanced techniques, you will proactively identify vulnerabilities, collaborate with application owners to understand root causes, and guide effective remediation to strengthen the firm's security posture.

We are seeking candidates with a passion for offensive security, deep technical expertise in penetration testing, and a commitment to continuous learning and excellence.

Job responsibilities

  • Plan, scope, and execute penetration testing engagements across a variety of environments, including web applications, APIs, cloud platforms, infrastructure, thick-client, and/or mobile applications.
  • Collect and validate pre-requisites for each engagement, ensuring all necessary access, documentation, and approvals are in place.
  • Perform manual and automated testing to identify vulnerabilities, misconfigurations, and security weaknesses, leveraging industry-standard tools and custom scripts.
  • Document and communicate findings through comprehensive reports that include technical details, risk assessments, and actionable remediation recommendations.
  • Conduct peer reviews of penetration test reports to ensure accuracy, consistency, and quality of deliverables.
  • Collaborate with development, infrastructure, and security teams to clarify findings, support remediation efforts, and provide subject matter expertise on offensive security.
  • Stay current with emerging threats, vulnerabilities, and attack techniques by leveraging threat intelligence, security research, and participation in relevant industry groups.
  • Contribute to the continuous improvement of penetration testing methodologies, tools, and frameworks to enhance effectiveness and alignment with firm strategy and regulatory requirements.

Required qualifications, capabilities, and skills

  • 5+ years of hands-on penetration testing experience in offensive security, with a proven track record of scoping, executing, and reporting on complex engagements.
  • Expertise in manual penetration testing of web, API, cloud (AWS/Azure/GCP), infrastructure, thick-client, and/or mobile applications (android/iOS), including the use of industry-standard tools (e.g., Burp Suite, Nmap, Metasploit, etc.).
  • Strong understanding of security assessment methodologies such as OWASP Top Ten, NIST Cybersecurity Framework, and other relevant standards.
  • Ability to identify and articulate systemic security issues related to threats, vulnerabilities, and risks, and provide clear, actionable recommendations for remediation.
  • Exceptional organizational and communication skills, including the ability to write detailed technical reports and present findings to both technical and non-technical stakeholders.
  • Experience conducting peer reviews of penetration test reports and mentoring junior testers.
  • Continuous learner who keeps up with the latest offensive security trends, tools, and techniques.

Preferred qualifications, capabilities, and skills

  • Knowledge of cybersecurity practices, operational risk management, and incident response methodologies within the US financial services sector, including relevant regulations, threats, and risks.
  • Proficiency in penetration testing and security concepts for both Windows and Unix-like operating systems.
  • Experience conducting security-focused source code reviews (e.g., Python, Java, Rust).
  • Experience in reverse engineering thick-client and mobile applications to identify vulnerabilities.
  • Relevant certifications such as OSWE, CREST (CRT, CCT), OSCP, OSCE, GXPN, GWAPT, GPEN, GMOB, or BSCP. GXPN, GWAPT, GPEN, GMOB, or BSCP

#CTC

JPMorganChase, one of the oldest financial institutions, offers innovative financial solutions to millions of consumers, small businesses and many of the world's most prominent corporate, institutional and government clients under the J.P. Morgan and Chase brands. Our history spans over 200 years and today we are a leader in investment banking, consumer and small business banking, commercial banking, financial transaction processing and asset management.

We offer a competitive total rewards package including base salary determined based on the role, experience, skill set and location. Those in eligible roles may receive commission-based pay and/or discretionary incentive compensation, paid in the form of cash and/or forfeitable equity, awarded in recognition of individual achievements and contributions. We also offer a range of benefits and programs to meet employee needs, based on eligibility. These benefits include comprehensive health care coverage, on-site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching and more. Additional details about total compensation and benefits will be provided during the hiring process. 

We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation.

JPMorgan Chase & Co. is an Equal Opportunity Employer, including Disability/Veterans

Our professionals in our Corporate Functions cover a diverse range of areas from finance and risk to human resources and marketing. Our corporate teams are an essential part of our company, ensuring that we're setting our businesses, clients, customers and employees up for success.

What JPMorgan Chase & Co. employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom

Apply