CST Penetration Tester

We’re looking for a CST Penetration Tester to join our Continuous Security Testing team, helping customers identify, understand and remediate vulnerabilities across their external attack surface.

Unlike traditional point-in-time penetration testing, our Continuous Security Testing service combines automated vulnerability scanning with hands-on manual testing throughout an ongoing engagement. You’ll investigate vulnerabilities, validate scanner findings, identify issues that automation alone cannot detect and determine their real-world impact through manual exploitation.

You’ll work directly with customers to clearly communicate risks and remediation, while also contributing to the continued development of our security testing capabilities, tooling and methodology.

• Deliver continuous security testing across customer environments, combining automated scanning with in-depth manual assessment.
• Monitor customers' external attack surfaces for changes, emerging vulnerabilities and new targets.
• Manually identify, verify and exploit vulnerabilities to establish their genuine impact.
• Validate automated scanner findings and investigate potential false positives and areas requiring deeper assessment.
• Chain vulnerabilities and findings where appropriate to demonstrate realistic attack paths and risk.
• Produce clear proof-of-concepts, reproduction steps and remediation recommendations for identified vulnerabilities.
• Communicate technical findings clearly and professionally to customers through vulnerability notifications, reporting and regular updates.
• Support pre-engagement activities, including scoping assessments, understanding customer requirements and contributing to statements of work.
• Onboard customers into the Continuous Security Testing service and configure ongoing vulnerability scanning.
• Research emerging vulnerabilities, techniques and tooling to continually improve our testing capabilities.
• Develop or enhance internal security testing tools and contribute to improvements across our processes and systems.
• Contribute to technical content including security advisories and whitepapers.
• Maintain your technical knowledge through ongoing research, professional development and relevant industry certifications.

You'll have a strong foundation in penetration testing and vulnerability assessment, with the ability to go beyond automated tooling and investigate how vulnerabilities could be exploited within real-world environments.

You'll be comfortable working independently on technical assessments while also engaging directly with customers to explain vulnerabilities, their potential impact and appropriate remediation.

You'll have a strong understanding of:

• Networking fundamentals including TCP/IP, HTTP, DNS, SMB, SMTP and the OSI model.
• Microsoft Windows environments and at least one Linux distribution.
• Web application technologies and security testing.
• REST and SOAP APIs, including XML and JSON.
• Identifying and exploiting web application vulnerabilities beyond simply testing against the OWASP Top 10.
• Penetration testing and assessment tools such as Burp Suite Professional and SQLMap.
• Internal and external infrastructure security testing.
• Identifying and exploiting vulnerabilities and misconfigurations across technologies such as Windows domains, Linux servers, databases, virtualisation platforms and network infrastructure.

You'll also have experience with at least one scripting language, ideally Python, although experience with PowerShell, Bash or Ruby would also be valuable.

• Hands-on experience identifying, validating and exploiting security vulnerabilities.
• Experience providing practical and proportionate remediation advice.
• Strong technical report writing skills, with the ability to clearly explain vulnerabilities, impact and remediation.
• Strong analytical and problem-solving skills.
• The ability to manage multiple priorities and work effectively to deadlines.
• Confidence communicating complex technical concepts to both technical and non-technical audiences.
• A professional, customer-focused approach to delivering security testing services.
• A proactive mindset and genuine interest in developing your penetration testing capabilities.

The following certifications, or equivalent recognised security qualifications, would be highly desirable:

• CPSA
• CRT
• OSCP

Experience conducting security assessments within cloud environments would also be advantageous.