Experteer Overview In this role you help safeguard Julius Baer by conducting rigorous security testing and advisory work across web apps, APIs, and infrastructure. You will partner with Exposure Managers, Application Owners, and Technology teams to define scopes, validate findings, and guide remediation. You’ll apply industry standards to assess vulnerabilities and contribute to secure-by-design practices. This position offers impact across the security program and opportunities to shape testing methodologies in a regulated environment.Compensaciones / Beneficios
- Reproduce and validate mitigation of vulnerabilities using tools like Burp Suite
- Perform in-depth reviews of penetration testing reports for clarity and accuracy
- Collaborate to define risk-based scopes for external penetration testing engagements
- Discuss hardening options with technology teams to establish safe baselines
- Serve as technical advisor on testing methodologies, findings interpretation, and remediation approaches
- Utilize tools (e.G., Burp Suite, Nmap) and manual techniques to validate vulnerabilities in web apps, APIs, and supporting infrastructure
- Ensure testing aligns with OWASP Testing Guide, OWASP Top 10, and internal security standards




- Analyze and challenge reported vulnerabilities to identify false positives and ensure proper classification
- Provide technical guidance to development and infrastructure teams for effective remediation
- Share insights and best practices across teams to improve internal security activities
- Collaborate with Exposure Managers and general experts to ensure consistent quality across testing activitiesResponsabilidades
- Bachelor’s degree in computer science, information security, or equivalent practical experience
- 3-5 years of hands-on penetration testing, application security, or vulnerability assessment
- Strong experience with web application security testing and Burp Suite
- Solid understanding of common vulnerabilities (OWASP Top 10) and exploitation techniques
- Ability to read, understand, and reproduce technical findings from penetration testing reports
- Experience with HTTP/S, authentication mechanisms, and modern web architectures (APIs, microservices)
- Strong analytical and problem-solving skills with attention to detail
- Effective communication skills to explain technical issues to non-technical stakeholders
- Professional proficiency in English and Spanish
- Eligible to work in SpainRequisitos principales
-

📌 Exposure Management Technical Expert 100% (F/M/D) (Madrid)
🏢 Julius Bär
📍 Madrid