Associate Penetration Tester

About the role

Bugcrowd is actively seeking an Associate Penetration Tester to integrate into our dynamic security operations team, providing a structured pathway for individuals beginning their journey in offensive security. This role is designed for a dedicated professional who will own the execution of defined testing engagements, applying disciplined methodology to uncover weaknesses before malicious actors can exploit them. You will work in close collaboration with experienced team members, taking ownership of specific testing objectives while contributing to the overall quality of assessment deliverables. The position emphasizes the consistent application of established frameworks to evaluate the security posture of diverse client systems and applications. Success in this role will be measured by your ability to reliably identify valid vulnerabilities, communicate findings with precision, and adhere to the rigorous standards expected within the security industry. You will be responsible for maintaining the integrity of testing processes and ensuring that all activities align with client scopes and established rules of engagement. This role serves as a critical foundation for developing advanced expertise in security testing and contributing meaningfully to the broader cybersecurity community. By focusing on execution and documentation, you will help uphold Bugcrowd's reputation for delivering actionable and reliable security testing services.

Key facts

What you'll do

• Execute comprehensive penetration tests focusing on web applications, APIs, and network infrastructure using structured methodologies.
• Manage testing activities to ensure completion within specified timeframes while strictly adhering to internal processes and client guidelines.
• Rapidly assimilate new security concepts and utilize testing tools effectively through guidance from senior security professionals.
• Articulate technical challenges or uncertainties clearly to mentors and Technical Pentest Managers to maintain project momentum.
• Contribute actively to post-testing review sessions and ensure that all testing procedures are meticulously recorded in documentation.
• Operate within the designated working window of UK core business hours, specifically from 09:00 to 17:30 GMT, to facilitate real-time collaboration.
• Apply a methodical approach to assess the security of systems, ensuring that testing activities are thorough and aligned with best practices.
• Utilize standard security assessment tools such as BurpSuite and Nmap to perform efficient and accurate evaluations of client environments.
• Support the continuous improvement of testing procedures by providing feedback on processes and suggesting practical enhancements.
• Maintain a high level of professionalism when interacting with clients and internal stakeholders, representing Bugcrowd's commitment to excellence.

Requirements

• Possess a minimum of 6 months of hands-on experience as a penetration tester or demonstrate equivalent practical background through personal projects or training.
• Exhibit strong written and spoken business English proficiency at a C1 level or as a native speaker to ensure clear communication.
• Demonstrate the capability to work remotely in a fully distributed work environment without requiring oversight.
• Maintain the physical ability to remain stationary for approximately 50% of the workday and manage a laptop for extended periods to perform daily tasks.
• Show unwavering integrity when handling highly confidential and sensitive client information, adhering to all data protection policies.
• Display a strong commitment to following instructions and maintaining focus during detailed testing procedures.
• Possess foundational knowledge of networking concepts, operating systems, and common application protocols to effectively conduct assessments.
• Be prepared to undergo a comprehensive background check, including verification of employment, educational history, and criminal record.

Nice to have

• Hold industry-recognized certifications such as OSCP (Offensive Security Certified Professional) or CPSA (CREST Practitioner Security Analyst) to validate practical skills.

Practical notes

• This position requires successful completion of a background check process that verifies employment, education, and criminal history.
• Bugcrowd is committed to being an equal opportunity employer and provides reasonable accommodations for individuals with disabilities during the application and hiring process.
• All applications must be submitted through the official careers portal available at https://www.bugcrowd.com/about/careers/.