CST Penetration Tester

We’re looking for a CST Penetration Tester to join our Continuous Security Testing team, helping customers identify, understand and remediate vulnerabilities across their external attack surface.

Unlike traditional point-in-time penetration testing, our Continuous Security Testing service combines automated vulnerability scanning with hands-on manual testing throughout an ongoing engagement. You’ll investigate vulnerabilities, validate scanner findings, identify issues that automation alone cannot detect and determine their real-world impact through manual exploitation.

You’ll work directly with customers to clearly communicate risks and remediation, while also contributing to the continued development of our security testing capabilities, tooling and methodology.

What you'll be doing

• Deliver continuous security testing across customer environments, combining automated scanning with in-depth manual assessment.
• Monitor customers' external attack surfaces for changes, emerging vulnerabilities and new targets.
• Manually identify, verify and exploit vulnerabilities to establish their genuine impact.
• Validate automated scanner findings and investigate potential false positives and areas requiring deeper assessment.
• Chain vulnerabilities and findings where appropriate to demonstrate realistic attack paths and risk.
• Produce clear proof-of-concepts, r...