You carry out security assessments on client systems within an agreed scope and timeframe. For the first few months you work alongside a senior tester;
after that you run yourown engagements. Roughly half the job is testing and half is writing: each finding needs clear reproduction steps, evidence and an explanation of the real business impact, because that is what allows the client to fix it. What you will do:
- Test within an agreed scope and stay inside it
- Document every finding with steps, evidence and real impact
- Retest fixes and say plainly whether they closed the issue

What they ask for:
- Hands-on practice: labs, CTFs and bug bounty all count
- Comfortable with Burp Suite and a scripting language
- Can explain an attack path to somebody who is not technical

Nice to have:
- eJPT, PNPT or equivalent
- Public write-ups
- A disclosed finding

📌 Pentester Junior (Cataluña)
🏢 Applus+ Laboratories
📍 Cataluña