Junior Penetration Tester | 100% REMOTE - Spain Since 2011, SQUAD Group has been a key player in the cybersecurity landscape. We partner with leading organizations to protect their information systems through a comprehensive 360° offering of consulting, integration, expertise, and managed services Our mission: Securing Together! We believe in a collaborative approach to cybersecurity, where experts and clients work hand-in-hand to anticipate threats and protect critical infrastructure. As part of our growing team, we're seeking a Senior Security Engineer specialising in Vulnerability Management. Based in Barcelona, this role will put you at the heart of a high-impact security engineering function, building and operating the systems that keep complex, large-scale environments continuously protected. Your Role You are a hands-on, curious security tester joining a pentest practice focused on web, mobile, and API applications. Working alongside senior pentesters on long-running client missions, you'll conduct hands-on assessments, document findings clearly, and grow into more autonomous engagements over time. Your Responsibilities - Conduct penetration tests on web applications, APIs, and mobile apps, following OWASP methodologies (OWASP Top 10, ASVS, MASVS). - Perform manual and tool-assisted vulnerability discovery (Burp Suite, OWASP ZAP, Nmap, and similar tooling). - Reproduce, validate, and document vulnerabilities with clear technical evidence and business-risk framing. - Write clear, well-structured pentest reports and executive summaries in English for international clients.



- Support remediation discussions with development teams, explaining findings and validating fixes. - Contribute to internal methodology, checklists, and knowledge-sharing within the pentest team. - Work on long-duration client missions, maintaining consistent quality and communication throughout the engagement. What You Bring - 3 years of experience in Cybersecurity, including at least 1 year dedicated to application penetration testing. - Solid understanding of web application vulnerabilities (injection, authN/authZ flaws, SSRF, IDOR, etc.) and common exploitation techniques. - Working knowledge of Burp Suite, ZAP, and standard recon/exploitation tooling. - Basic scripting ability (Python or Bash) to support testing and automation. - Fluent professional English, spoken and written — required for client-facing missions and report writing. - Comfortable working independently on long missions while staying aligned with senior pentesters and client stakeholders. Preferred Certifications: eJPT, eWPT, OSCP (in progress or recently obtained), or equivalent hands-on offensive security credentials. Why Join Squad? Personalized Growth: We help you build a training and certification plan aligned with your professional goals through our SquadExeperience - Expertise Development: Participate in internal events like our MixYourTalent webinars and monthly CTF sessions. - Visibility: Attend major industry conferences and contribute to our #TheExpert technical blog - Culture: Enjoy a dynamic and close-knit environment with after-work events and team gatherings that foster great camaraderie.

📌 Penetration Tester (La Coruña)
🏢 SQUAD Conseil et Expertises
📍 La Coruña