> Markdown version of [/jobs/ext/1307872-penetration-tester](https://www.wearedevelopers.com/jobs/ext/1307872-penetration-tester). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Penetration Tester

- **Company:** Willis Towers Watson
- **Location:** Cádiz, Spain
- **Contract:** Permanent contract
- **Skills:** Application Programming Interfaces (APIs), Amazon Web Services, Software System Penetration Testing, Microsoft Azure, Bash Shell, Burp Suite, Cloud Computing, Cloud Computing Security, Python (Programming Language), Nmap, Open Web Application Security, PCI Data Security Standards, Windows PowerShell, Red Team (Cyber Security), Wireshark, Web Applications, Scripting, Google Cloud, Mitre Att&ck, Metasploit, Nessus, Purple Team (Cyber Security), Devsecops, Vulnerability Analysis
- **Published:** July 17, 2026
- **Apply:** https://www.adzuna.es/contact-us.html

## About the Role

Must-Have Skills

 + 3+ years of experience in penetration testing or offensive security
 + Strong knowledge of:
 + OWASP Top 10
 + MITRE ATT&CK framework
Proficiency with common security tools:

 + Burp Suite
 + Nmap
 + Metasploit
 + Nessus
 + Wireshark
Experience scripting in:

 + Python
 + Bash
 + PowerShell
Excellent verbal and written English communication skills Eligibility to work in Spain Willingness to travel occasionally if needed
Nice-to-Haves

 + Certifications such as:
 + CREST CRT
 + OSCP, OSWE, CEH
Cloud security experience with:

 + AWS
 + Azure
 + Google Cloud Platform (GCP)
Familiarity with compliance standards:

 + ISO 27001
 + GDPR
 + NIST
 + PCI DSS
Bilingual English & Spanish is a plus

## Description

As a Penetration Tester, you will simulate cyberattacks to identify vulnerabilities and strengthen the security of networks, applications, and cloud infrastructure. You will work closely with SOC teams and DevSecOps to provide technical insight and strategic recommendations that directly enhance cyber resilience and compliance for clients.
Accountabilities

 + Plan and execute manual and automated penetration tests on:
 + Web applications
 + APIs
 + Internal and external networks
Conduct vulnerability assessments and identify risk exposure Generate detailed technical reports with actionable mitigation steps Collaborate with SOC Analysts, DevSecOps, and IT teams to implement fixes Support Red Team and Purple Team exercises Assist in incident response investigations, when required Stay current with emerging threats, tools, and techniques in the cybersecurity landscape


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines)
- [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture)
- [DevSecOps: Security in DevOps](https://www.wearedevelopers.com/videos/36-devsecops-security-in-devops)
- [Securing Your Web Application Pipeline From Intruders](https://www.wearedevelopers.com/videos/53-securing-your-web-application-pipeline-from-intruders)
- [It's a (testing) trap! - Common testing pitfalls and how to solve them](https://www.wearedevelopers.com/videos/1193-it-s-a-testing-trap-common-testing-pitfalls-and-how-to-solve-them)

## Related Articles

- [The 8 Best Code Testing Tools](https://www.wearedevelopers.com/magazine/402-the-8-best-code-testing-tools)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)