{"id":3345087,"url":"https://alion.io/job/claranet-cst-penetration-tester","title":"CST Penetration Tester","company":{"id":51503,"name":"Claranet","domain":"claranet.com","url":"https://alion.io/company/claranet","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"onlyfy","truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Leeds, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":35000,"max":40000,"currency":"GBP","period":"year","gross":null,"usd_annual":53231},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Bash","optional":false},{"name":"Burp Suite","optional":false},{"name":"DNS","optional":false},{"name":"Linux","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"Ruby","optional":false},{"name":"SOAP","optional":false},{"name":"SQLmap","optional":false},{"name":"TCP/IP","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-10-27T12:06:31Z","employer_posted_date":null,"last_verified_at":"2026-10-27T12:06:31Z","board_verified":false,"closed_at":null,"days_open":2,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":2},"description":"We’re looking for a CST Penetration Tester to join our Continuous Security Testing team, helping customers identify, understand and remediate vulnerabilities across their external attack surface.\nUnlike traditional point-in-time penetration testing, our Continuous Security Testing service combines automated vulnerability scanning with hands-on manual testing throughout an ongoing engagement. You’ll investigate vulnerabilities, validate scanner findings, identify issues that automation alone cannot detect and determine their real-world impact through manual exploitation.\nYou’ll work directly with customers to clearly communicate risks and remediation, while also contributing to the continued development of our security testing capabilities, tooling and methodology.\nWhat you'll be doingDeliver continuous security testing across customer environments, combining automated scanning with in-depth manual assessment.\nMonitor customers' external attack surfaces for changes, emerging vulnerabilities and new targets.\nManually identify, verify and exploit vulnerabilities to establish their genuine impact.\nValidate automated scanner findings and investigate potential false positives and areas requiring deeper assessment.\nChain vulnerabilities and findings where appropriate to demonstrate realistic attack paths and risk.\nProduce clear proof-of-concepts, reproduction steps and remediation recommendations for identified vulnerabilities.\nCommunicate technical findings clearly and professionally to customers through vulnerability notifications, reporting and regular updates.\nSupport pre-engagement activities, including scoping assessments, understanding customer requirements and contributing to statements of work.\nOnboard customers into the Continuous Security Testing service and configure ongoing vulnerability scanning.\nResearch emerging vulnerabilities, techniques and tooling to continually improve our testing capabilities.\nDevelop or enhance internal security testing tools and contribute to improvements across our processes and systems.\nContribute to technical content including security advisories and whitepapers.\nMaintain your technical knowledge through ongoing research, professional development and relevant industry certifications.\nWhat we're looking forYou'll have a strong foundation in penetration testing and vulnerability assessment, with the ability to go beyond automated tooling and investigate how vulnerabilities could be exploited within real-world environments.\nYou'll be comfortable working independently on technical assessments while also engaging directly with customers to explain vulnerabilities, their potential impact and appropriate remediation.\nTechnical skills\n\nYou'll have a strong understanding of:\nNetworking fundamentals including TCP/IP, HTTP, DNS, SMB, SMTP and the OSI model.\nMicrosoft Windows environments and at least one Linux distribution.\nWeb application technologies and security testing.\nREST and SOAP APIs, including XML and JSON.\nIdentifying and exploiting web application vulnerabilities beyond simply testing against the OWASP Top 10.\nPenetration testing and assessment tools such as Burp Suite Professional and SQLMap.\nInternal and external infrastructure security testing.\nIdentifying and exploiting vulnerabilities and misconfigurations across technologies such as Windows domains, Linux servers, databases, virtualisation platforms and network infrastructure.\nYou'll also have experience with at least one scripting language, ideally Python, although experience with PowerShell, Bash or Ruby would also be valuable.\nExperience we're looking forHands-on experience identifying, validating and exploiting security vulnerabilities.\nExperience providing practical and proportionate remediation advice.\nStrong technical report writing skills, with the ability to clearly explain vulnerabilities, impact and remediation.\nStrong analytical and problem-solving skills.\nThe ability to manage multiple priorities and work effectively to deadlines.\nConfidence communicating complex technical concepts to both technical and non-technical audiences.\nA professional, customer-focused approach to delivering security testing services.\nA proactive mindset and genuine interest in developing your penetration testing capabilities.\nCertificationsThe following certifications, or equivalent recognised security qualifications, would be highly desirable:\nCPSA\nCRT\nOSCP\nExperience conducting security assessments within cloud environments would also be advantageous.","description_format":"text","description_chars":4518,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Professional development"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","Managed IT Services (MSP)","Cloud Consulting & Migration"],"lifecycle":[{"event":"open","at":"2026-10-27T16:52:45Z"}],"visa":[{"country":"GB","licensed_sponsor":true,"evidence":"Licensed UK visa sponsor (Senior or Specialist Worker, Skilled Worker)","filings_12m":null,"filings_prev_12m":null,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"Global Business Mobility: Senior or Specialist Worker; Skilled Worker","cap_exempt":false,"checked_at":"2026-10-30T06:20:16+00:00","sources":["UK Home Office: register of licensed sponsors (workers)"],"filings_for_role_12m":0}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":2,"expected_fill_days":24,"reasons":["seen:2","velocity","win:early"],"computed_at":"2026-10-30T05:48:23Z"},"pay":{"stated_usd_annual":53231,"is_top_pay":false},"html_url":"https://alion.io/job/claranet-cst-penetration-tester","json_url":"https://alion.io/job/claranet-cst-penetration-tester.json","meta":{"generated_at":"2026-10-30T10:38:49Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":15332,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-31T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":51503},"rest":"https://alion.io/mcp/rest/get_company?id=51503"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fclaranet-cst-penetration-tester"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fclaranet-cst-penetration-tester"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fclaranet-cst-penetration-tester"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/claranet-cst-penetration-tester\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fclaranet-cst-penetration-tester"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3345087}},{"tool":"search_jobs","arguments":{"company":"claranet.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3345087},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}