Senior Penetration Tester / Red Team Consultant – EY GDS Spain - Hybrid

The opportunity

As a Senior Penetration Tester / Red Team Consultant, you are part of the EY
Cyber Security team delivering offensive security services that help clients
validate and improve their security posture. You execute structured penetration
tests and (where applicable) threat-led adversary simulations across
applications, infrastructure, and cloud/hybrid environments, translating
technical findings into clear, actionable risk reduction.

As a member of our team in the EY GDS Spain office in Malaga, you’ll have a
chance to extend your knowledge & experience by working on interesting projects
with the newest technologies and approaches. You’ll support clients in choosing
the most suitable business solution and take part in digital transformation.

Your key responsibilities

· Plan and execute penetration tests (internal/external), including web
applications/APIs,
network/infrastructure, and cloud environments

· Define scope, rules of engagement, and test strategy with stakeholders; ensure




safe execution and minimal
operational impact

· Perform security testing using a balanced approach of manual techniques and
validated tooling; document
evidence and reproduce findings reliably

· Deliver high-quality reporting (executive summary, technical details, risk
rating, remediation guidance);
support retesting and closure

· Conduct (or support) red team / purple team exercises where applicable,
aligning scenarios to business risks
and adversary techniques

· Collaborate with defensive teams (SOC/Blue Team/IR) while ensuring appropriate
separation and
independence of offensive and defensive activities

· Contribute to continuous improvement: refine methodologies, reusable
playbooks/checklists, and
knowledge sharing

Skills and attributes for success

· Strong understanding of common attack paths and security weaknesses across
web, infrastructure, identity, and cloud

· Structured and discipli

📌 Senior Pentester (Málaga)
🏢 Ey
📍 Málaga