Penetration Tester

November 4, 2026

Remote

Senior

Madrid, Spain

Indeed

Also worth knowing

English is required

Description

The company is looking for an experienced Penetration Tester to improve and develop its penetration testing strategy and ensure security assessments of web applications and APIs are delivered. The role spans testing across networks, mobile, thick clients and AI/LLM-based systems, plus developing AI-driven agents to automate recurring testing tasks. The position is based in Madrid within a global security team.

Responsibilities

Execute penetration tests across multiple attack surfaces: web applications, APIs, networks, mobile, thick clients and AI/LLM-based systems
Efficiently own, perform and deliver security assessments
Develop, maintain and validate AI-driven agents and tools to automate recurring testing tasks, reducing false positives and improving accuracy
Communicate service capabilities and test results effectively to IT owners and stakeholders
Compile lessons-learnt sessions and educational material for IT developers and other relevant parties
Cooperate closely with global teams from IT application owners, information security specialists and chief information security officers
Improve and develop the strategy of penetration testing within the organisation, ensuring assessments are delivered and remediations are coordinated and fulfilled
Use knowledge of OWASP Top 10 vulnerabilities, testing procedures and remediation recommendations

Requirements

At least 5 years of experience in information security and penetration testing
Good understanding of software development and architecture
Good knowledge of programming and scripting languages
Sound understanding of security frameworks ISO27001/2, NIST, OWASP Top 10
Experience with vulnerability management and penetration testing tools including Burp Suite, nmap, Qualys, Bruno/Swagger, SQLMap and Kali Linux
Experience in cloud security and testing cloud environments
Ability to communicate complex technical concepts clearly to both business and technical audiences
Good communication and writing skills; proficiency in English is required, other languages are a plus
Experience working in an international environment
Industry-relevant certifications such as SANS, CEH, Offensive Security or eLearn Security
Knowledge of advanced persistent threats and modern attack techniques
Experience in agentic development and deploying and hosting AI tools
Familiarity with MITRE ATT&CK, SAST/DAST, cloud testing and reverse engineering

Conditions

Hybrid setup balancing work from home and the office premises
Full-time employment
Base salary range between EUR 42,000 and EUR 70,000 with eligibility for an attractive performance-based bonus