Prevention Analyst - Pentesting
At Eye Security · Berlin - hybrid; Netherlands; Berlin, Germany
- Operations
- Full-time
Early applicant Posted 23 hours ago. Radar emails jobs like this within hours of us finding them. The free weekly email can take up to a week.
See how well you match Match me reads your CV and picks the jobs that suit you best.
Get jobs like this within hours Radar emails you new jobs open to you within hours of us finding them, before most people see them.
Where you’ll work
Hybrid, based in Berlin or the Netherlands
“Berlin - hybrid”
From the location.
“Netherlands”
From the location.
“Berlin, Berlin, Germany”
From the job board field.
The job board lists it as hybrid.
Hybrid means some days in the office. The listing says how many, and where.
Report a mistake
- Posted
- 23 hours ago
- First seen by us
- 14 November 2026
- Last checked
- 14 hours ago
Job description
From Eye Security’s job post, as they wrote it.
Prevention Analyst - Pentesting
About this role
We are looking for a Prevention Analyst - Pentester, to join our Prevention track. An attacker does not look at one server in isolation. They look at everything a company exposes to the internet and work out where to start. You will do the same for our clients, taking the attacker’s view of their external attack surface, seeing what an attacker sees, and doing what an attacker would do next.
Read the full description
That means reading the story behind an attack surface. A forgotten subdomain, an old login portal, and a misconfigured mail server may each look minor on their own. Together they can show how an organisation has grown, where its blind spots are, and where someone could get in. When you find a potential weak point, you dig into it technically to find out how far an attacker could actually go.
This is not a classic penetration testing role. The deep dive draws on pentest methodology and expertise, but it is not a full pentest, and you will not spend your weeks writing long reports. We focus on finding the high impact vulnerabilities that need attention now and getting them to the client in a form they can act on.
This is for someone with hands on pentesting experience who wants to work across many customer environments, sharpen their attacker mindset, and grow into owning complex prevention engagements end to end.
What you will do
* Assess clients’ external attack surface as a whole, from the attacker’s perspective.
* Identify gaps and weaknesses across the surface, not just within a single asset, and work out how they connect.
* Run technical deep dives into potential weak points to establish how far an attacker could get in practice.
* Separate what needs fixing now from what does not, and focus on high and critical findings with immediate impact.
* Turn technical findings into short, clear advice that clients can understand and act on.
* Share what you learn with the team and actively pick up what others know. We work on problems together.
* Contribute to improving our approach, sharing ideas that make assessments faster, clearer, and more useful for clients.
What you will need
* Hands on penetration testing experience and a solid grasp of pentest methodology, particularly for external infrastructure and web applications.
* The ability to think like an attacker, to look at a set of exposed assets and see where you would start and why.
* Good judgement about real world impact, so you can tell an interesting finding from an urgent one.
* The ability to explain technical findings to non technical readers, briefly and without losing accuracy.
* A collaborative way of working and a genuine interest in learning and growing with colleagues, not working as a solo player.
* Comfortable working across multiple client environments in parallel.
* Fluent English.
Nice-to-have
* Certifications such as OSCP, BSCP, or CPTS.
* A proven bug bounty track record or other real world offensive security experience.
* Experience working with SMEs or mid market customers on security topics.
What we offer
* A meaningful mission, protecting organisations across Europe from real world cyber threats.
* Work with top tier professionals from national CERTs, intelligence agencies, and leading tech backgrounds.
* A remote friendly culture with quarterly meetups and annual company retreats, for example in Spain, Portugal, or Italy.
* Thursday socials to stay connected.
* A generous time off policy, including wellbeing and volunteering days.
About Eye Security
Eye Security is providing cybersecurity with embedded cyber insurance solutions for organisations across Europe. Headquartered in the Netherlands, we are already over 190 FTEs and continue to grow internationally, having secured our Series C funding of 60 million.
We combine cutting edge technology with hands on expertise to detect, respond to, and recover from cyber threats in real time. Our team brings together talent from intelligence, military, tech, and consulting backgrounds, all united by a shared mission, to make enterprise grade cybersecurity accessible to every business, not just the big players.
At Eye, you will work on projects with an international footprint, solving real world challenges and helping to build a safer digital future for our clients.
We are an equal opportunity employer. We are committed to making our hiring process accessible to everyone. If you need a reasonable accommodation to apply or interview for this role, please inform the TA team.
Prevention Analyst - PentestingEye Security
Apply on Eye Security (opens in a new tab)Get jobs like this by email
Once a week, we email the new remote jobs open where you live, each with the line that proves it. Every email has a one-click unsubscribe.
