> Markdown version of [/jobs/ext/2012844-penetration-tester](https://www.wearedevelopers.com/jobs/ext/2012844-penetration-tester). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Penetration Tester - **Company:** Wtw - **Location:** Madrid, Spain - **Contract:** Permanent contract - **Skills:** Application Programming Interfaces (APIs), Software System Penetration Testing, User Authentication, Software as a Service, Cyber Security, Infrastructure as a Service (IaaS), Open Web Application Security, Platform as a Service (PAAS), SQL Injection, Web Applications, Software Security, Cross-Site Scripting (XSS), Information Technology, Vulnerability Analysis - **Published:** August 10, 2026 - **Apply:** https://www.buscojobs.com.es/penetration-tester-en-madrid-ID-366329390 ## About the Role li /ul h3The Requirements /h3 ul liEducation: A bachelor's degree in a related field such as computer science, information security, or cybersecurity is commonly preferred, but not always mandatory. Relevant industry experience can compensate for formal education requirements. /li /ul h3Skills: /h3 ul liWeb Application Security: In-depth knowledge of web application vulnerabilities, common attack techniques, and mitigation strategies. Strong understanding of OWASP Top 10 vulnerabilities is crucial. /li liInfrastructure security: Working knowledge of different on-prem and cloud builds (IaaS, PaaS, SaaS), in-depth understanding of operating system and its common flaws /li liPenetration Testing Techniques: Proficiency in various penetration testing methodologies, tools, and frameworks. Experience with manual testing techniques, automated vulnerability scanners, and exploit frameworks is necessary. /li liAnalytical and Problem-Solving Skills: Ability to analyze complex web application environments, identify vulnerabilities, and exploit them. Strong problem-solving skills to understand attack vectors and recommend appropriate countermeasures. /li liVery good English skills (C1/C2 level), both spoken and written /li /ul h3Holds relevant industry certification/s or equivalent like the following: /h3 ul liCEH - Certified Ethical Hacker /li liOSCP - Offensive Security Certified Professional /li liPNPT - Practical Network Penentration Tester /li /ul pWe're committed to equal employment opportunity and provide application, interview and workplace adjustments and accommodations to all applicants. ## Description ph3The Role /h3 ul liVulnerability Assessment: Conducting comprehensive assessments of web applications and Infrastructure to identify security vulnerabilities, such as cross-site scripting (XSS), SQL injection, authentication flaws, insecure configurations, poor host device and service configurations, and use these to penetrate deeper into the application/server./li liPenetration Testing: Performing controlled attacks on web applications.APIs, infrastructure, and simulate real-world hacking attempts and identify potential entry points for attackers.This involves utilizing various techniques, tools, and methodologies to exploit vulnerabilities and gain access./li liSecurity Analysis: Analyzing the results of penetration tests to assess the severity of identified vulnerabilities, their potential impact on the system and the business, and the likelihood of exploitation./li liReporting and Documentation: Preparing detailed reports that document the findings, including identified vulnerabilities, attack vectors, and recommendations for remediation.These reports typically outline the risks associated with each vulnerability and provide guidance on how to mitigate them./li liRemediation Support: Collaborating with developers and system administrators to assist in the remediation of identified vulnerabilities.This may involve providing guidance on secure coding practices, recommending security controls, or validating the effectiveness of implemented fixes./li liStay Up to Date: Keeping abreast of the latest web application and infrastructure vulnerabilities, attack techniques, security tools, and industry best practices.This includes staying informed about emerging threats and trends in web applications and infrastructure./li liEthical Approach: Conducting all testing and assessment activities within a legal and ethical framework, ensuring that the organization's systems and data are not compromised or harmed during the process./li liContinuous Improvement: Engaging in professional development activities, such as attending conferences, participating in training programs, and obtaining relevant certifications, to enhance knowledge and skills in cyber security./li /ul h3The Requirements /h3 ul liEducation: A bachelor's degree in a related field such as computer science, information security, or cybersecurity is commonly preferred, but not always mandatory.Relevant industry experience can compensate for formal education requirements./li /ul h3Skills: /h3 ul liWeb Application Security: In-depth knowledge of web application vulnerabilities, common attack techniques, and mitigation strategies.Strong understanding of OWASP Top 10 vulnerabilities is crucial./li liInfrastructure security: Working knowledge of different on-prem and cloud builds (IaaS, PaaS, SaaS), in-depth understanding of operating system and its common flaws /li liPenetration Testing Techniques: Proficiency in various penetration testing methodologies, tools, and frameworks.Experience with manual testing techniques, automated vulnerability scanners, and exploit frameworks is necessary./li liAnalytical and Problem-Solving Skills: Ability to analyze complex web application environments, identify vulnerabilities, and exploit them.Strong problem-solving skills to understand attack vectors and recommend appropriate countermeasures./li liVery good English skills (C1/C2 level), both spoken and written /li /ul h3Holds relevant industry certification/s or equivalent like the following: /h3 ul liCEH - Certified Ethical Hacker /li liOSCP - Offensive Security Certified Professional /li liPNPT - Practical Network Penentration Tester /li /ul pWe're committed to equal employment opportunity and provide application, interview and workplace adjustments and accommodations to all applicants.If you foresee any , from the application process through to joining WTW, please email /p /p #J-*****-Ljbffr ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Generate AI in the Browser with Chrome AI - Raymond Camden](https://www.wearedevelopers.com/videos/1770-generate-ai-in-the-browser-with-chrome-ai-raymond-camden) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Hacking MSSQL on Cloud. All of them. How I became sysadmin on Azure, AWS, GCP and Alibaba.](https://www.wearedevelopers.com/videos/100339-hacking-mssql-on-cloud-all-of-them-how-i-became-sysadmin-on-azure-aws-gcp-and-alibaba) - [It's a (testing) trap! - Common testing pitfalls and how to solve them](https://www.wearedevelopers.com/videos/1193-it-s-a-testing-trap-common-testing-pitfalls-and-how-to-solve-them) - [Securing Your Web Application Pipeline From Intruders](https://www.wearedevelopers.com/videos/53-securing-your-web-application-pipeline-from-intruders) ## Related Articles - [The 8 Best Code Testing Tools](https://www.wearedevelopers.com/magazine/402-the-8-best-code-testing-tools) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [11 Best Practices For PHP Security](https://www.wearedevelopers.com/magazine/90-11-best-practices-for-php-security) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)