Prevention Analyst - Pentesting

The role

You will assess a client's external attack surface from an attacker's point of view. You will find weak points across their internet-facing assets, dig into the high-impact ones, and explain the fixes in plain terms.

What you will do

• Assess clients' external attack surface as a whole, from the attacker's perspective.
• Identify gaps and weaknesses across the surface and work out how they connect.
• Run technical deep dives into potential weak points to establish how far an attacker could get.
• Separate what needs fixing now from what does not, focusing on high and critical findings.
• Turn technical findings into short, clear advice that clients can act on.
• Share what you learn with the team and pick up what others know.
• Contribute ideas that make assessments faster, clearer and more useful for clients.

Required qualifications

• Hands-on penetration testing experience.
• Solid grasp of pentest methodology, particularly for external infrastructure and web applications.
• Ability to think like an attacker and see where you would start and why.
• Good judgement about real-world impact.
• Ability to explain technical findings to non-technical readers, briefly and accurately.
• Collaborative way of working and interest in learning with colleagues.
• Comfortable working across multiple client environments in parallel.
• Fluent English.

Nice to have

• Certifications such as OSCP, BSCP or CPTS.
• Proven bug bounty track record or other real-world offensive security experience.
• Experience working with SMEs or mid-market customers on security topics.

Benefits

• Remote friendly culture.
• Quarterly meetups and annual company retreats.
• Thursday socials.
• Generous time off policy, including wellbeing and volunteering days.
• Work with professionals from national CERTs, intelligence agencies and leading tech backgrounds.

About the company

Eye Security provides cybersecurity with embedded cyber insurance for organisations across Europe. It is headquartered in the Netherlands, has over 190 FTEs and recently secured Series C funding of 60 million.