Continuous Security Penetration Tester

Claranet; Leeds; On-site; GBP 55,000 - 85,000; Full time

Job summary

Claranet is seeking a CST Penetration Tester to join our Continuous Security Testing team. You will identify, validate and exploit vulnerabilities across customer external attack surfaces, combining automated scanning with hands-on manual testing and clear remediation guidance.

You will work directly with customers to explain risks, deliver reproduction steps and contribute to tooling and methodology improvements. This role emphasizes practical impact and proactive security testing practices.

Qualifications

• Hands-on experience identifying, validating and exploiting security vulnerabilities.
• Ability to discuss risks and remediation with customers.
• Experience delivering practical remediation guidance.

Responsibilities

• Deliver continuous security testing across customer environments, combining automated scanning with in-depth manual assessment.
• Monitor customers' external attack surfaces for changes and new targets.
• Manually identify, verify and exploit vulnerabilities to establish real-world impact.
• Validate automated scanner findings and investigate false positives.
• Produce proof-of-concept, reproduction steps and remediation recommendations.
• Communicate findings clearly to customers via notifications and reports.
• Onboard customers into the testing service and configure ongoing scanning.
• Research emerging vulnerabilities and tooling to improve testing capabilities.

Skills

Penetration testing

Vulnerability assessment

Customer communication

Threat modelling

Tools

Burp Suite Professional

SQLMap

Job description

Claranet is seeking a CST Penetration Tester to join our Continuous Security Testing team. You will identify, validate and exploit vulnerabilities across customer external attack surfaces, combining automated scanning with hands-on manual testing and clear remediation guidance.

You will work directly with customers to explain risks, deliver reproduction steps and contribute to tooling and methodology improvements. This role emphasizes practical impact and proactive security testing practices.