Junior Penetration Tester

°°° Who we are °°°

Approach Cyber is a pure player in cybersecurity and personal data protection.

We provide 360-degree solutions to strengthen our clients' cyber resilience: anticipate, prevent, protect, detect, respond, and recover. We are committed to delivering top-tier services, including advisory and audit, training and awareness, security technology integration, and software development. Approach is also a recognised Managed Security Service Provider (MSSP) thanks to our Security Operations Centre (SOC).

With over 100 experts based in Belgium and Switzerland, Approach Cyber draws on 25 years of experience and thousands of successfully delivered projects across multiple industries. We are recognised for our expertise, our human approach, and our pragmatic execution.

°°° Who we are looking for °°°

We are looking for a Junior Pentester with a strong interest in offensive security to integrate our Ethical Hacking Team. Alongside experienced team members, you will take part in stimulating offensive assignments which will include technical security assessments for different environments including applications (web, API, ...), infrastructure, network and internet of things.

°°° Your role °°°

As a Junior Pentester, you will play an important role in helping identify security vulnerabilities across different environments, working closely with our senior consultants.

You will take part in penetration tests and red teaming exercises, learn to analyze security risks, and help build actionable recommendations to enhance the security posture of our clients.

Here are just a few of the responsibilities you should take on:

• Support applications, API's, infrastructures, networks/cloud and mobile penetration testing and red teaming exercises, under the guidance of senior team members,
• Learn to identify, analyze, and exploit security vulnerabilities in accordance with industry standards (OWASP, MITRE ATT&CK, NIST, etc.),
• Contribute to detailed reports on findings, including risk assessments and remediation recommendations,
• Stay up to date with the latest cybersecurity threats, attack techniques, and security best practices and tools,
• Use your curiosity to help improve the tools, techniques and procedures used by your team,
• Start building your external visibility in the community, at your own pace (which can take various forms, such as participation in CTFs, internal knowledge sharing, blogposts, or presence at local meetups, etc).

°°° Your profile °°°

You have:

• A true passion for ethical hacking: pentesting exercices on platforms such as Hack The Box, Try Hack Me, or participation in CTF's, or technology watch (whitepapers, blogposts, ...), etc You’ll be surrounded by your colleagues who are as passionate as you are. Even the coffee machine remembers…
• You don’t need any experience in pentesting, ethical hacking, or a related IT security field but relevant internships, CTFs and personal offensive projects count and are particularly appreciated,
• A good level of spoken and written English, and the ability to speak/write/listen to/understand one of the national languages such as French or Dutch will make your integration smoother.
• A good foundation in
• Web application security concepts
• Network/infra architecture security concepts
• Familiarity with penetration testing tools such as Burp Suite, ffuf, Nuclei, Nessus, Bloodhound, Impacket, NetExec, ...
• Basic scripting using Python or Bash or any programming language.

Considered as a plus:

• Your information security certifications such as: eJPT, PJPT, eWPT, OSCP, or completed learning paths on Hack The Box Academy or TryHackMe are a plus. And if you don’t have one of these, we will pay for it.
• A relevant degree in computer science, cybersecurity, or a related field, or equivalent self-taught experience.
• Your first experience with bug bounty programs or personal lab projects.

Human skills:

• Curiosity: Ethical hacking is constantly evolving. New vulnerabilities, new tools, new methodologies... The good pentester you are loves to dig, test, experiment, and continuously learn.
• Deep analytical skills and problem-solving: A pentest is like a puzzle. You need to analyze a system, identify potential weaknesses, and find attack paths that others might not have considered.
• Clear and impactful communication: You know that a great security report isn't just about listing vulnerabilities; it's about telling a story that makes sense to non-technical stakeholders. You translate complex findings into clear, actionable insights.
• Team spirit: Cybersecurity is a team effort. You share knowledge, discuss trends, and support your teammates, knowing that collaboration makes everyone stronger.
• Integrity above all: You handle sensitive information with the highest level of confidentiality and professionalism. Trust is at the core of everything you do.
• Last but not least, we would like you to become an ambassador for the professional values that are at the heart of our philosophy:
• TOP-NOTCH
• HUMAN-CENTRIC
• NO-NONSENSE

°°° Our offer °°°

• Join a dynamic and fast-growing company in a booming sector
• Participate in the development of the company as a co-creator of innovative solutions
• Grow your career path with structured mentorship from senior pentesters and add top-level trainings and certifications to your CV (OSCP, eCPPT, CPTS, CRTP, CRTO, …). Our certification track is made for you.
• Benefit from an attractive salary package, including a full range of benefits:
• Mobility budget you can use for a company car (electrical), green or shared mobility initiatives or housing costs.
• Competitive group insurance including pension fund, death, and disability coverage,
• Attractive complementary insurances for non-work-related accident and loss of salary in case of sickness, company fully supported contribution (hospitalisation and outpatient care)
• 32 days holiday/year (on a fulltime equivalent basis)
• Flexible home working policy (2,5 days/week minimum at office)
• Bonus based on your annual objectives
• Other fringe benefits (meal vouchers, eco vouchers, bike lease, ...)
• Enjoy some fun company events and exclusive team experiences
• Contribute to a safer, fairer world for data subjects and citizens, ensure the serenity of great businesses and essential public institutions.
• Live your values daily in a dynamic, fun and multicultural working environment.