Junior Penetration Tester | 100% REMOTE - Spain Since 2011, SQUAD Group has been a key player in the cybersecurity landscape. We partner with leading organizations to protect their information systems through a comprehensive 360° offering of consulting, integration, expertise, and managed services Our mission: Securing Together! We believe in a collaborative approach to cybersecurity, where experts and clients work hand-in-hand to anticipate threats and protect critical infrastructure. As part of our growing team, were seeking a Senior Security Engineer specialising in Vulnerability Management. Based in Barcelona, this role will put you at the heart of a high-impact security engineering function, building and operating the systems that keep complex, large-scale environments continuously protected. Your Role You are a hands-on, curious security tester joining a pentest practice focused on web, mobile, and API applications. Working alongside senior pentesters on long-running client missions, youll conduct hands-on assessments, document findings clearly, and grow into more autonomous engagements over time. Your Responsibilities * Conduct penetration tests on web applications, APIs, and mobile apps, following OWASP methodologies (OWASP Top 10, ASVS, MASVS). * Perform manual and tool-assisted vulnerability discovery (Burp Suite, OWASP ZAP, Nmap, and similar tooling). * Reproduce, validate, and document vulnerabilities with clear technical evidence and business-risk framing. * Write clear, well-structured pentest reports and executive summaries in English for international clients.



* Support remediation discussions with development teams, explaining findings and validating fixes. * Contribute to internal methodology, checklists, and knowledge-sharing within the pentest team. * Work on long-duration client missions, maintaining consistent quality and communication throughout the engagement. What You Bring * 3 years of experience in Cybersecurity, including at least 1 year dedicated to application penetration testing. * Solid understanding of web application vulnerabilities (injection, authN/authZ flaws, SSRF, IDOR, etc.) and common exploitation techniques. * Working knowledge of Burp Suite, ZAP, and standard recon/exploitation tooling. * Basic scripting ability (Python or Bash) to support testing and automation. * Fluent professional English, spoken and written — required for client-facing missions and report writing. * Comfortable working independently on long missions while staying aligned with senior pentesters and client stakeholders. Preferred Certifications: eJPT, eWPT, OSCP (in progress or recently obtained), or equivalent hands-on offensive security credentials. Why Join Squad? Personalized Growth: We help you build a training and certification plan aligned with your professional goals through our SquadExeperience * Expertise Development: Participate in internal events like our MixYourTalent webinars and monthly CTF sessions. * Visibility: Attend major industry conferences and contribute to our #TheExpert technical blog * Culture: Enjoy a dynamic and close-knit environment with after-work events and team gatherings that foster great camaraderie.

📌 Penetration Tester (Valencia)
🏢 SQUAD Conseil et Expertises
📍 Valencia