We are looking for the very Top Talent…and we would be delighted if you were to join our team!¡Inscríbase sin demora! Se espera un gran volumen de solicitantes para el puesto que se detalla a continuación, no espere para enviar su CV.More in details, UST is a multinational company based in North America, certified as a Top Employer company with over 35.000 employees all over the world and presence in more than 30 countries. We are leaders on digital technology services, and we provide large-scale technologic solutions to big companies.What are we looking for?We are looking for aSenior Penetration Testerto join a strategic cybersecurity project with a general client in thewealth managementsector.As part of our Security Compliance Competence Centre (SCCC) in Madrid, you will play a key hands-on role in identifying, exploiting, and assessing security vulnerabilities across applications, APIs, infrastructure, and cloud environments.You will work closely with security teams, developers, architects, and business stakeholders to strengthen the organization's security posture through proactive offensive security activities and expert security assessments.Location:Hybrid. Madrid city center (Sol area). 3 days a week in the office.Language : English is a must. Spanish desirable.Key ResponsibilitiesPerformmanual and automated penetration testingon web applications, APIs, and infrastructure.Identify, validate, and reproducesecurity vulnerabilities and attack scenarios .Assess thetechnical and business impactof security findings.Provideremediation recommendationsand support security improvements.ApplyOWASP-based methodologiesand industry security best practices.Collaborate withsecurity, development,



and infrastructure teamsto strengthen the organization's security posture.Required Qualifications+5 years of hands-on experiencein Penetration Testing, Ethical Hacking, or Application Security.Strong knowledge ofOWASP Top 10, web application security, and exploitation techniques .Experience with tools such asBurp Suite, Nmap, OWASP ZAP, or Metasploit .Familiarity withAPIs, authentication mechanisms, HTTP/S, and modern web architectures .Stronganalytical, troubleshooting, and communication skills .Professional proficiency inEnglish ; certifications such asOSCP, eWPT, CEH, or GWAPTare a plus.What can we offer? 23 days of Annual Leave plus the 24th and 31st of December as discretionary days! Numerous benefits (Health Care Plan, teleworking compensation, Life and Accident Insurances).`Retribución Flexible´ Program: (Meals, Kinder Garden, Transport, online English lessons, Health Care Plan…)Free access to several training platformsProfessional stability and career plansUST also, compensates referrals from which you could benefit when you refer professionals.The option to pick between 12 or 14 payments along the year.Real Work Life Balance measures (flexibility, WFH or remote work policy, compacted hours during summertime…)UST Club Platform discounts and gym Access discountsIf you would like to know more, don’t hesitate to apply and we’ll get in touch to fill you in detail. We are waiting for you!In UST we are committed to equal opportunities in our selection processes and do not discriminate based on race, gender, disability, age, religion, sexual orientation or nationality. xkdbapo We have a special commitment to Disability & Inclusion, so we are interested in hiring people with disability certificate.

📌 Senior Penetration Tester | Madrid
🏢 UST España & Latam
📍 Madrid