It drives everything we do – from research to client work to community involvement. And it unifies our global team into an elite force with integrity, fierce passion, and relentless creativity that doesn’t just “push the envelope” or “think outside the box.” About IOActive IOActive, a trusted partner for Global 1000 enterprises, provides research-fueled security services across all industries. Our cutting‑edge cybersecurity teams provide highly specialized technical and programmatic services including full‑stack penetration testing, program efficacy assessments, and hardware hacking. IOActive brings a unique attacker’s perspective to every engagement to maximize cybersecurity investments and improve the security posture and operational resiliency of our clients. Founded in 1998, IOActive is headquartered in Seattle with integral operations, including state of the art hardware hacking labs in Seattle, WA, Madrid, Spain and Cheltenham, UK. IOActive Red Team Specialists perform multi‑vector, chained attacks that include exploitation through physical, network, web, and social engineering methods with the goal of making our clients more secure and prepared to respond to real incidents. Work as part of a team performing Red and Purple Team Campaigns for IOActive clients, both remotely and on‑site Perform adversarial emulation, assumed breach scenarios, post‑exploitation, social engineering,



and physical security testing Manage project tasks and deadlines on a multi‑time‑zone team Develop unique tools to assist in project goals Participate in project conference calls with clients and on business development calls in support of sales activities Provide technical leadership/mentorship to the consulting team and to our clients on security topics Contribute to the security industry through presentations, whitepapers and/or research Experience performing and leading covert red team operations and activities, including performing adversarial emulation, assumed breach scenarios, post‑exploitation, social engineering, and physical security testing Penetration testing experience in Network, Web applications, Wireless networks, Physical security, and Social engineering Experience with C2 and post‑exploitation frameworks, including Cobalt Strike, Empire, Metasploit, Throwback, and similar tools Python, Ruby, PowerShell, Java, and Shell scripting Knowledge and experience with enterprise network/system/application architecture and design including complex environments utilizing Microsoft Windows, Active Directory, and Linux Deep understanding on Windows and Linux systems administration and post‑exploitation activities on each platform A chance to work with an industry leader in cyber security Flexibility—work remotely or from the office as needed Competitive compensation and performance‑based incentives We're one of “the good guys” doing crazy cool stuff to thwart bad guys in a critically important business, social and political arena. We prohibit discrimination and harassment of any kind based on race, color, sex, religion, sexual orientation, national origin, disability, genetic information, pregnancy, or any other protected characteristic as outlined by federal, state, or local laws. This policy applies to all employment practices within our organization, including hiring, recruiting, promotion, termination, layoff, recall, leave of absence, compensation, benefits, training, and apprenticeship.

📌 Senior Security Consultant, Red Team (España)
🏢 IOActive
📍 España