Experteer Overview

You join HBX Group to proactively assess and strengthen security across corporate, cloud, applications, and AI-enabled environments. You will combine offensive security, adversary emulation, and purple team work to uncover weaknesses and boost cyber resilience.

Collaborating with Blue Team, Security Architecture, Dev Ops, and AI teams, you help secure fast-moving product delivery at scale. This role sits at the heart of risk reduction in a general travel tech company with a strong data-driven culture.

Compensaciones / Beneficios

- Conduct penetration tests across web apps, APIs, cloud platforms, infrastructure, and corporate environments
- Identify vulnerabilities and attack paths; assess exposure risk to business services
- Support secure development by validating remediations during the tech lifecycle
- Collaborate with engineering and infrastructure teams to ensure vulnerabilities are remediated
- Assess risks related to Generative AI, LLMs, AI agents, and ML systems; mitigate threats
- Plan and execute realistic red team engagements using MITRE ATTu0026CK; emulate real-world actors
- Evaluate security controls across on-prem, cloud, and hybrid environments
- Support purple team activities to validate detections and improve monitoring and response
- Perform security assessments of cloud configurations, Kubernetes,



containers, and IaC deployments
- Develop automation tooling to enhance offensive security capabilities
- Share knowledge and contribute to security research and innovations
- Contribute to AI governance, monitoring, and secure-by-design AI practices
- Promote continuous improvement through red/blue team exercises

Responsabilidades

- Experience in Red Team, Penetration Testing, Offensive Security or equivalent security-focused role
- Strong understanding of offensive security methodologies and adversary emulation
- Experience with vulnerability assessments, penetration testing, and security validation
- Knowledge of application security, secure development practices, and code reviews
- Understanding of Dev Ops/Agile in fast-moving delivery environments
- Knowledge of cloud and container tech (Kubernetes, Docker) and cloud providers (AWS, GCP, Azure)
- Experience with scripting and automation to boost testing efficiency
- Ability to translate technical findings into risk-based recommendations
- Good collaboration skills across Security, Engineering, Dev Ops, and infrastructure teams
- Proactive learner with awareness of emerging threats and attack techniques

Requisitos principales

- attractive benefits package

📌 Security Expert (Red Team) (Valencia)
🏢 Hotelbeds
📍 Valencia