You carry out security assessments on client systems within an agreed scope and timeframe. For the first few months you work alongside a senior tester; after that you run your own engagements. Roughly half the job is testing and half is writing: each finding needs clear reproduction steps, evidence and an explanation of the real business impact, because that is what allows the client to fix it. What you will do:

Test within an agreed scope and stay inside it Document every finding with steps, evidence and real impact Retest fixes and say plainly whether they closed the issue What they ask for:

Hands-on practice: labs, CTFs and bug bounty all count Comfortable with Burp Suite and a scripting language Can explain an attack path to somebody who is not technical Nice to have:

eJPT, PNPT or equivalent Public write-ups A disclosed finding

#J-18808-Ljbffr

📌 Pentester Junior (Barcelona)
🏢 Applus+ Laboratories
📍 Barcelona