Location: Madrid, M, ES
Join a team of cybersecurity professionals and help Swiss Re fulfil its mission to make the world more resilient.
As the Penetration Tester, you will improve and develop the strategy of penetration testing within Swiss Re, ensuring security assessments of web applications and APIs are delivered and remediations are coordinated and fulfilled.
What's more, you'll be working in a hybrid setup, perfectly balancing work from home and the office premises.
About the team
The Penetration Testing team simulates real-world cyberattacks on Swiss Re's computer systems, networks, applications, services and platforms. As part of the Group Security & Technology Platforms (GSTP) division, the team detects security weaknesses and fixes them before malicious hackers can exploit them.
About the role
Continuously improve existing processes and develop long-term strategy for the penetration testing service
Efficiently own, perform and deliver security assessments of web applications, APIs and infrastructure penetration reports, and coordinate the remediation of all findings and recommendations
Compile "lessons-learnt" sessions and educational material for IT developers and other relevant parties
Manage relations with internal partners and external security companies providing penetration tests
Cooperate closely with general teams from IT application owners, information security specialists and chief information security officers
Be someone who believes in continuous innovation, is curious and relentless in finding a better way every day
Use your knowledge of Open Web Application Security Project (OWASP) Top 10 Vulnerabilities, testing procedures and remediation recommendations
Your qualifications
What we need from you
At least 2 years of experience in information security and penetration testing




Good understanding of software development and architecture
Sound understanding of security frameworks (ISO27001/2, NIST, OWASP Top 10)
Experience with vulnerability management and penetration testing tools (Burp Suite, nmap, Qualys, etc.)
Exposure to AI/LLM security concepts or a strong interest in learning about securing AI-enabled applications and agentic systems
Analytical thinking, structured approach to address complex matters
Ability to communicate complex technical concepts clearly and unambiguously to both business and technical audiences
Good communication and writing skills;
proficiency in English is required, other languages are a plus
You are a phenomenal teammate, results-oriented, focused and fond of international professional relationships
You are curious, like to drive things forward, raise your voice for improvement and possess a great interest in learning new things
Nice-to-have
Industry-relevant certifications (SANS, CEH, Offensive Security, eLearn Security, etc.)
Familiarity with the OWASP Top 10 for LLM Applications, prompt injection risks, AI security testing
For Spain the base salary range for this position is between EUR 42,000 and EUR 70,000 (for a full-time role).
the requirements, scope, complexity and responsibilities of the role,
the applicant's own profile including education/qualifications, expertise, specialisation, skills and experience.
In the situation where you do not meet all the requirements or you significantly exceed these, the offered salary may be below or above the advertised range.
In addition to your base salary, you may be eligible for additional rewards and benefits including an attractive performance-based bonus.
About Swiss Re
Swiss Re is one of the world's leading providers of reinsurance, insurance and other forms of insurance-based risk

📌 Penetration Tester (Hybrid Set Up) (Madrid)
🏢 Hispanic Alliance For Career Enhancement
📍 Madrid