Experteer Overview
As a Senior Penetration Tester / Red Team Consultant you join EY GDS Spain's Cyber Security team to validate and improve clients' security posture through structured penetration tests and threat-led simulations. You’ll plan engagements, apply manual and tool-based testing, and translate findings into actionable risk guidance, collaborating with defensive teams. The role spans web applications, infrastructure, and cloud/hybrid environments, with opportunities to contribute to digital transformation. You’ll work in a cross-functional context and help shape testing methodologies and playbooks.

Compensaciones / Beneficios
• Plan and execute internal/external penetration tests across web apps, networks, and cloud environments
• Define scope, rules of engagement, and test strategy with stakeholders
• Perform security testing using manual techniques and tooling, document evidence and reproduce findings
• Deliver high-quality reports with executive summaries, risk ratings, and remediation guidance
• Conduct (or support)



red team / purple team exercises aligned to business risks
• Collaborate with defensive teams while maintaining appropriate separation of offensive activities
• Contribute to continuous improvement of methodologies, playbooks, and knowledge sharing

Responsabilidades
• 3 - 4 years of hands-on penetration testing and/or red teaming with proven reporting
• Solid knowledge of testing methodologies (e.g., OWASP)
• Hands-on experience with offensive security tooling (Burp Suite, Nmap, automation scripting)
• Strong Windows/Linux and networking fundamentals; troubleshooting and evidence capture
• English at least B2 - C1 (written and spoken)

Requisitos principales
• Empowering Career Development
• Versátil Work-Life Integration
• Comprehensive Well-Being Programs
• Meaningful Volunteering Opportunities
• Recognized Performance and Rewards

📌 Senior Pentester - EY GDS Spain - Hybrid (Málaga)
🏢 EY (Ernst u0026 Young)
📍 Málaga