Prevention Analyst - Pentesting

PREVENTION ANALYST - PENTESTING

About this role

We are looking for a Prevention Analyst - Pentester, to join our Prevention track. An attacker does not look at one server in isolation. They look at everything a company exposes to the internet and work out where to start. You will do the same for our clients, taking the attacker’s view of their external attack surface, seeing what an attacker sees, and doing what an attacker would do next.

That means reading the story behind an attack surface. A forgotten subdomain, an old login portal, and a misconfigured mail server may each look minor on their own. Together they can show how an organisation has grown, where its blind spots are, and where someone could get in. When you find a potential weak point, you dig into it technically to find out how far an attacker could actually go.

This is not a classic penetration testing role. The deep dive draws on pentest methodology and expertise, but it is not a full pentest, and you will not spend your weeks writing long reports. We focus on finding the high impact vulnerabilities that need attention now and getting them to the client in a form they can act on.

This is for someone with hands on pentesting experience who wants to work across many customer environments, sharpen their attacker mindset, and grow into owning complex prevention engagements end to end.

What you will do

• Assess clients’ external attack surface as a whole, from the attacker’s perspective.
• Identify gaps and weaknesses across the surface, not just within a single asset, and work out how they connect.
• Run technical deep dives into potential weak points to establish how far an attacker could get in practice.
• Separate what needs fixing now from what does not, and focus on high and critical findings with immediate impact.
• Turn technical findings into short, clear advice that clients can understand and act on.
• Share what you learn with the team and actively pick up what others know. We work on problems together.
• Contribute to improving our approach, sharing ideas that make assessments faster, clearer, and more useful for clients.

What you will need

• Hands on penetration testing experience and a solid grasp of pentest methodology, particularly for external infrastructure and web applications.
• The ability to think like an attacker, to look at a set of exposed assets and see where you would start and why.
• Good judgement about real world impact, so you can tell an interesting finding from an urgent one.
• The ability to explain technical findings to non technical readers, briefly and without losing accuracy.
• A collaborative way of working and a genuine interest in learning and growing with colleagues, not working as a solo player.
• Comfortable working across multiple client environments in parallel.
• Fluent English.

Nice-to-have

• Certifications such as OSCP, BSCP, or CPTS.
• A proven bug bounty track record or other real world offensive security experience.
• Experience working with SMEs or mid market customers on security topics.

What we offer

• A meaningful mission, protecting organisations across Europe from real world cyber threats.
• Work with top tier professionals from national CERTs, intelligence agencies, and leading tech backgrounds.
• A remote friendly culture with quarterly meetups and annual company retreats, for example in Spain, Portugal, or Italy.
• Thursday socials to stay connected.
• A generous time off policy, including wellbeing and volunteering days.

About Eye Security

Eye Security is providing cybersecurity with embedded cyber insurance solutions for organisations across Europe. Headquartered in the Netherlands, we are already over 190 FTEs and continue to grow internationally, having secured our Series C funding of 60 million.

We combine cutting edge technology with hands on expertise to detect, respond to, and recover from cyber threats in real time. Our team brings together talent from intelligence, military, tech, and consulting backgrounds, all united by a shared mission, to make enterprise grade cybersecurity accessible to every business, not just the big players.

At Eye, you will work on projects with an international footprint, solving real world challenges and helping to build a safer digital future for our clients.

We are an equal opportunity employer. We are committed to making our hiring process accessible to everyone. If you need a reasonable accommodation to apply or interview for this role, please inform the TA team.