Skip to content

Open nowPosted yesterday

Junior Penetration Tester

SAIC1,036 open roles

Where
Remote Work, TX, United States
Work mode
Remote
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowJunior Penetration TesterSAIC · Remote Work, TX, United States
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on SAIC's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.8% of postings close within 7 days. Measured by our own scanner across the market. SAIC postings stay open a median of 14 days.

Share of postings closed within
  1. 2.2%1 day
  2. 4.7%3 days
  3. 13.8%7 days
  4. 22.3%14 days
  5. 37.8%30 days
  6. 59.0%60 days
This job: posted yesterday

SAIC median: 14 days open

The posting

Job Description

Science Applications International Corporation (SAIC) is seeking a Junior Penetration Tester to join our offensive security practice supporting a major state and local government customer. This is an excellent opportunity for an early-career security professional who wants to build hands-on experience while working on real-world engagements that matter. As a Junior Penetration Tester, you will focus primarily on web application and network penetration testing. Working alongside experienced testers, you will plan and execute assessments, identify vulnerabilities, validate findings, and document results in clear, actionable reports. You'll bring curiosity, persistence, and a strong desire to learn, and we'll give you the mentorship and room to grow your skills. This position reports to the Security Assessments Manager.

Responsibilities

  • Assessment Delivery: Conduct penetration tests across a range of client environments, applying black box and white box methodologies for web, network, and mobile targets, aligned to NIST standards.
  • Engagement Support: Manage your own assigned tasks and workload within engagements, from scoping support through final reporting, with guidance from senior testers and a consistent focus on quality.
  • Reporting: Produce clear, well-structured technical reports that communicate findings, risk context, and actionable remediation guidance. Learn to translate complex technical details into terms that both technical teams and executive stakeholders can act on.
  • Mobile Security: Contribute to iOS and Android application security assessments, with the opportunity to grow your mobile testing capabilities over time.
  • Security Fundamentals: Apply your knowledge of security architectures, firewalls, network traffic, and access controls to identify and assess weaknesses across client environments.
  • Tools and Techniques: Use COTS, GOTS, and custom tools to scan for, identify, and validate vulnerabilities. Help research and evaluate new tools, techniques, and technologies, and recommend improvements to the team.
  • Client Communication: Develop your ability to present findings with confidence, whether walking a customer through a vulnerability chain or helping explain business risk to their leadership.
  • Professional Development: Align your growth with the NICE Framework and build foundational skills in cybersecurity and digital forensics through mentorship, training, and hands-on practice.
  • Team Contribution: Share what you learn with teammates, contribute to internal tooling and methodology improvements, and help close skill gaps across the practice.
  • Continuous Learning: Stay current on emerging vulnerabilities, attack techniques, and industry developments, and bring that knowledge back to the team.

Qualifications

Required Education and Qualifications

  • Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field is preferred but not required. Equivalent hands-on experience, such as labs, CTFs, internships, or personal projects, may be considered in lieu of a degree.
  • Candidates must be able to pass a CJIS Criminal Justice background investigation and maintain CJIS clearance throughout the term of employment.

Required Experience

  • Foundational knowledge of cybersecurity concepts, including networking, operating systems, and common attack techniques.
  • Working knowledge of the OWASP Web Security Testing Guide (WSTG) and OWASP Top 10, including how to identify and exploit common vulnerabilities in lab or practical settings.
  • Hands-on familiarity with standard web application testing & vuln scanning tools (e.g., Burp Suite, Tenable etc.).
  • Basic understanding of network security concepts, including firewalls, network traffic, and access controls.
  • Ability to write clear, organized technical documentation, with a willingness to incorporate feedback and improve report quality.
  • Strong curiosity, problem-solving skills, and a drive to keep learning.
  • One of the following certifications is strongly preferred: GWAPT & OSCP. Candidates holding or actively pursuing the above or PNPT, PenTest+, PJPT, eJPT, OSEP/OSWE/OSED, or GWEB will also be considered.

Preferred Experience

  • Exposure to mobile application testing concepts and tools (e.g., Frida, Objection, MobSF, ADB), including any hands-on iOS or Android assessment experience.
  • Familiarity with API security testing (REST, GraphQL, SOAP).
  • Exposure to source code review as part of white box testing.
  • Experience with CTFs, bug bounty programs, home labs, or platforms such as Hack The Box, TryHackMe, or PortSwigger Web Security Academy.
  • Basic scripting skills (e.g., Python, Bash, PowerShell) to automate tasks.
  • Introductory exposure to cloud security concepts, digital forensics, or reverse engineering.
  • Experience presenting technical information to peers or stakeholders, or interest in building this skill.
  • Ability to work collaboratively under the guidance of senior team members.

About Us

SAIC® is a premier mission integrator focused on advancing the power of technology and innovation to serve and protect our world. Our robust portfolio of offerings across the defense, space, intelligence, and civilian markets includes secure high-end solutions in mission IT, enterprise IT, engineering services, and professional services. We integrate emerging technology, rapidly and securely, into mission critical operations that modernize and enable critical national imperatives.

We are approximately 23,000 strong; driven by mission, united by purpose, and inspired by opportunities. SAIC is an Equal Opportunity Employer. Headquartered in Reston, Virginia, SAIC has annual revenues of approximately $7.3 billion. For more information, visit saic.com. For ongoing news, please visit our newsroom.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against SAIC's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on SAIC's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    SAIC's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.