Overview

As a Senior Pentester, you will design realistic attack scenarios using MITRE ATT&CK; TTPs and lead offensive assessments across web, mobile, network, cloud, and AI-enabled environments. You'll participate in Red Team and Purple Team exercises to improve threat detection and response in collaboration with Blue Team partners. You will manage audit projects, develop offensive tooling, and communicate risk-focused findings to technical and business audiences.

This role offers hands-on testing at scale within a security-aligned, impact-driven team.

Compensaciones / Beneficios

- Hybrid working model
- 8 weeks per year teleworking outside usual area
- Adaptable start and finish times
- career plan development, training and language learning
- National and international mobility
- Relocation package available

Responsabilidades
- Lead penetration testing engagements in complex corporate environments
- Participate in Red Team exercises and apply evasion techniques
- Identify vulnerabilities, assess impact, and propose mitigations
- Develop or adapt offensive tools and automations using Python, Bash or PowerShell
- Produce technical and executive risk reports




- Present findings to technical and business stakeholders
- Manage audit projects including scope, timelines, and deliverables

Requisitos principales
- 5+ years of penetration testing experience (web, mobile, network, cloud, Active Directory, Wi‐Fi)
- Experience in Red Team operations designing and executing simulated attacks
- Advanced knowledge of Burp Suite, Nmap, Metasploit, or C2 frameworks
- Ability to automate offensive tasks via scripting (Python, Bash, PowerShell)
- Experience producing technical and executive risk reports
- Strong communication skills and ability to present results clearly
- Experience managing cybersecurity or technical audit projects
- Offensive certifications such as OSCP, OSEP, OSWE, eCPPT, CRTP or equivalent
- Knowledge of PTES, MITRE ATT&CK; or OWASP
- Experience assessing security in AI/LLM-based systems (OWASP Top 10 for LLMs)
- Strong written and verbal communication
- Independent leadership and project management
- Cross-functional collaboration
- Burp Suite
- Nmap
- Metasploit

📌 Pentester Senior - GMV (Tres Cantos)
🏢 GMV
📍 Tres Cantos