Location: Madrid, M, ES

Join a team of cybersecurity professionals and help Swiss Re fulfil its mission to make the world more resilient.

As the Penetration Tester, you will improve and develop the strategy of penetration testing within Swiss Re, ensuring security assessments of web applications and APIs are delivered and remediations are coordinated and fulfilled.

What's more, you'll be working in a hybrid setup, perfectly balancing work from home and the office premises.

About the team

The Penetration Testing team simulates real-world cyberattacks on Swiss Re's computer systems, networks, applications, services and platforms. As part of the Group Security & Technology Platforms (GSTP) division, the team detects security weaknesses and fixes them before malicious hackers can exploit them.

We're looking for an experienced Penetration Tester who's ready to help us protect our digital assets through comprehensive testing, research, fixing and reporting. If this sounds like you, we'd like to hear from you

About the role

Nobody is perfect and meets 100% of our requirements. If you, however, meet some of the criteria below and are curious about the world of penetration testing inside a large reinsurance company, we'll be more than happy to meet you

- Execute penetration tests across multiple attack surfaces: web applications, APIs, networks, mobile, thick clients and AI/LLM-based systems

- Efficiently own, perform and deliver security assessments

- Develop, maintain and validate AI-driven agents and tools to automate recurring testing tasks, reducing false positives and improving accuracy

- Communicate service capabilities and test results effectively to IT owners and stakeholders

- Compile "lessons-learnt" sessions and educational material for IT developers and other relevant parties

- Cooperate closely with integral teams from IT application owners, information security specialists and chief information security officers

- Be someone who believes in continuous innovation,



is curious and relentless in finding a better way every day

- Use your knowledge of Open Web Application Security Project (OWASP) Top 10 Vulnerabilities, testing procedures and remediation recommendations

About You /Your qualification

What we need from you

- At least 5 years of experience in information security and penetration testing

- Good understanding of software development and architecture

- Have good knowledge of programming and scripting languages

- Sound understanding of security frameworks (ISO27001/2, NIST, OWASP Top 10)

- Experience with vulnerability management and penetration testing tools (Burp Suite, nmap, Qualys, Bruno/Swagger, SQLMap, Kali Linux etc.)

- Experience cloud security and testing cloud environments.

- Ability to communicate complex technical concepts clearly and unambiguously to both business and technical audiences

- Good communication and writing skills; proficiency in English is required, other languages are a plus

- Experience working in an international environment

Nice-to-have

- Industry-relevant certifications (SANS, CEH, Offensive Security, eLearn Security, etc.)

- Knowledge of advanced persistent threats and modern attack techniques

- Experience in agentic development and deploying/hosting AI tools (containers, servers, APIs)

- Familiarity with MITRE ATT&CK;, SAST/DAST, cloud testing, and reverse engineering

For Spain the base salary range for this position is between EUR 42,000 and EUR 70,000 (for a full-time role). The specific salary offered considers:

- the requirements, scope, complexity and responsibilities of the role,
- the applicant’s own profile including education/qualifications, expertise, specialisation, skills and experience.

In the situation where you do not meet all the requirements or you significantly exceed these, the offered salary may be below or above the advertised range.

In addition to your base salary, you may be eligible for additional rewards and benefits including an attractive performance-based bonus.

📌 Penetration Tester (España)
🏢 Swiss Re
📍 España