Information Security Analyst (PenTester)

About the role

Tabby is looking for an entry‑level Information Security Analyst with a focus on penetration testing. This role provides a structured entry point into offensive security, allowing you to learn industry‑standard tools and frameworks while supporting the team in validating and strengthening the company’s security posture.

Key responsibilities

• Assist senior engineers in conducting penetration tests on web applications, APIs and network infrastructure.
• Support vulnerability assessments using automated scanning tools such as Nmap and other scanners, and perform basic manual verification.
• Participate in Red Team and Purple Team exercises, helping to simulate adversary techniques and observe detection mechanisms.
• Execute controlled offensive testing tasks, including script execution, test environment setup and phishing simulations under supervision.
• Document findings, reproduce steps, collect evidence and help prepare structured penetration test reports.
• Track identified vulnerabilities, follow remediation progress and re‑test patched systems under guidance.

Required profile

• Recent graduate or early‑career professional seeking an entry‑level role in offensive security.
• Eager to learn industry‑standard frameworks such as OWASP Top 10 and MITRE ATT&CK.
• Ability to work under supervision and follow detailed test cases.
• Strong analytical mindset and attention to detail.

Required skills

• Familiarity with OWASP Top 10 and MITRE ATT&CK frameworks.
• Basic knowledge of web application, API and network security testing.
• Experience with Nmap and generic vulnerability scanning tools.
• Ability to write or modify simple scripts for security testing.