> Markdown version of [/jobs/ext/1926668-pentester](https://www.wearedevelopers.com/jobs/ext/1926668-pentester). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Pentester - **Company:** Uk Cyber Defence - **Location:** Málaga, Spain - **Contract:** Permanent contract - **Skills:** Application Programming Interfaces (APIs), Amazon Web Services, Software System Penetration Testing, Microsoft Azure, Bash Shell, Burp Suite, Cloud Computing, Digital Assets, Python (Programming Language), Nmap, Open Web Application Security, PCI Data Security Standards, Windows PowerShell, Red Team (Cyber Security), Wireshark, Web Applications, Scripting, Google Cloud, Mitre Att&ck, Metasploit, Nessus, Purple Team (Cyber Security), Devsecops, Vulnerability Analysis - **Published:** August 5, 2026 - **Apply:** https://www.buscojobs.com.es/pentester-en-malaga-ID-365600628 ## About the Role Must-Haves 3+ years of experience in penetration testing or offensive security. Strong understanding of common vulnerabilities (OWASP Top 10, MITRE ATT&CK). Proficiency in tools such as Burp Suite, Nmap, Metasploit, Nessus, and Wireshark. Experience with scripting languages (Python, Bash, PowerShell). Excellent written and verbal communication (English). Eligibility to work in Spain and occasional travel if required. Nice-to-Haves CREST CRT or equivalent (OSCP, OSWE, CEH, etc.). Experience with cloud pentesting (AWS, Azure, GCP). Familiarity with compliance standards (ISO *****, GDPR, NIST, PCI DSS). English & Spanish language skills. ## Description Role OverviewCyber Defence is a fast-growing cybersecurity company on a mission to protect digital assets and build client trust through robust, ethical, and forward-thinking cyber practices. From our office in Pueblo Nuevo, we serve clients across the UK, Spain, and beyond, working with CREST-certified practices and delivering government-grade security services./What You'll Be DoingAs a Pentester at Cyber Defence, you'll play a key role in simulating attacks to identify system vulnerabilities across networks, applications, and cloud infrastructure. This is a hands-on technical role with a strategic impact on our clients' resilience and regulatory compliance.Key ResponsibilitiesPlan and execute manual and automated penetration tests across web apps, networks, and APIs.Perform internal and external vulnerability assessments.Create comprehensive reports on findings with clear mitigation guidance.Collaborate with SOC Analysts, DevSecOps, and IT teams to implement remediations.Stay updated on the latest attack vectors and security research.Support Red Team and Purple Team exercises.Assist with incident response investigations when needed.Skills and QualificationsMust-Haves3+ years of experience in penetration testing or offensive security.Strong understanding of common vulnerabilities (OWASP Top 10, MITRE ATT&CK).Proficiency in tools such as Burp Suite, Nmap, Metasploit, Nessus, and Wireshark.Experience with scripting languages (Python, Bash, PowerShell).Excellent written and verbal communication (English).Eligibility to work in Spain and occasional travel if required.Nice-to-HavesCREST CRT or equivalent (OSCP, OSWE, CEH, etc.).Experience with cloud pentesting (AWS, Azure, GCP).Familiarity with compliance standards (ISO *****, GDPR, NIST, PCI DSS).English & Spanish language skills.OUR BENEFITSBe part of a mission-driven cybersecurity firm with global impact.Work alongside CREST-certified experts and forward-thinking leadership.Professional development budget & certification support.On-site work with flexibility (based out of Pueblo Nuevo office).Vibrant office culture near the coast - good vibes only!About usAt Cyber Defence, our culture is built on trust, innovation, and resilience.We're a small team of passionate professionals driven by a shared mission:To protect and defend businesses from sophisticated digital threats!Collaboration & TeamworkWe believe that the best solutions come from working together. Open communication, mutual respect, and a team-first mentality drive our success. No egos, just a collective drive to deliver the best for our clients.Innovation & Problem-SolvingCyber threats are constantly evolving, and so are we. We encourage creativity and curiosity, empowering our team to explore new ideas and develop long-term solutions, not just quick fixes.Accountability & IntegrityOur clients trust us with their most valuable assets, and we honour that trust through professionalism and transparency. We take ownership, learn from mistakes, and continuously improve.Growth & FlexibilityWe invest in our people through training, mentorship, and professional development. Our flexible work policies support work-life balance, ensuring our team thrives both personally and professionally.A Mission-Driven CultureWhat unites us is a shared mission: to make the digital world safer.Cyber Defence isn't just a place to work, it's where you can make a real impact. ## Related Videos - [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Intermediate Bitcoin Script](https://www.wearedevelopers.com/videos/25-intermediate-bitcoin-script) - [It's a (testing) trap! - Common testing pitfalls and how to solve them](https://www.wearedevelopers.com/videos/1193-it-s-a-testing-trap-common-testing-pitfalls-and-how-to-solve-them) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Oops! Stories of supply chain shenanigans](https://www.wearedevelopers.com/videos/245-oops-stories-of-supply-chain-shenanigans) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [The 8 Best Code Testing Tools](https://www.wearedevelopers.com/magazine/402-the-8-best-code-testing-tools) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)