> Markdown version of [/jobs/ext/2749464-senior-penetration-tester-madrid](https://www.wearedevelopers.com/jobs/ext/2749464-senior-penetration-tester-madrid). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Penetration Tester | Madrid

- **Company:** UST España
- **Location:** Madrid, Spain (Remote available)
- **Contract:** Permanent contract
- **Skills:** Application Programming Interfaces (APIs), Software System Penetration Testing, Authentication Protocols, Burp Suite, Cloud Computing, Digital Technology, Nmap, Web Application Security, Web Applications, Software Security, Metasploit
- **Published:** September 6, 2026
- **Apply:** https://www.buscojobs.com.es/senior-penetration-tester-madrid-en-madrid-ID-369557609

## About the Role

+5 years of hands-on experiencein Penetration Testing, Ethical Hacking, or Application Security.
Strong knowledge ofOWASP Top 10, web application security, and exploitation techniques.
Experience with tools such asBurp Suite, Nmap, OWASP ZAP, or Metasploit.
Familiarity withAPIs, authentication mechanisms, and modern web architectures.
Stronganalytical, troubleshooting, and communication skills.
Professional proficiency inEnglish; certifications such asOSCP, eWPT, CEH, or GWAPTare a plus.

## Description

We are looking for the very Top Talent...and we would be delighted if you were to join our team!More in details, UST is a multinational company based in North America, certified as a Top Employer company with over ****** employees all over the world and presence in more than 30 countries.We are leaders on digital technology services, and we provide large-scale technologic solutions to big companies.What are we looking for?We are looking for aSenior Penetration Testerto join a strategic cybersecurity project with a global client in thewealth managementsector.As part of our Security Compliance Competence Centre (SCCC) in Madrid, you will play a key hands-on role in identifying, exploiting, and assessing security vulnerabilities across applications, APIs, infrastructure, and cloud environments.You will work closely with security teams, developers, architects, and business stakeholders to strengthen the organization's security posture through proactive offensive security activities and expert security assessments.Location:Hybrid.Madrid city center (Sol area).3 days a week in the office.Language: English is a must.Spanish desirable.Key ResponsibilitiesPerformmanual and automated penetration testingon web applications, APIs, and infrastructure.Identify, validate, and reproducesecurity vulnerabilities and attack scenarios.Assess thetechnical and business impactof security findings.Provideremediation recommendationsand support security improvements.ApplyOWASP-based methodologiesand industry security best practices.Collaborate withsecurity, development, and infrastructure teamsto strengthen the organization's security posture.Required Qualifications+5 years of hands-on experiencein Penetration Testing, Ethical Hacking, or Application Security.Strong knowledge ofOWASP Top 10, web application security, and exploitation techniques.Experience with tools such asBurp Suite, Nmap, OWASP ZAP, or Metasploit.Familiarity withAPIs, authentication mechanisms, and modern web architectures.Stronganalytical, troubleshooting, and communication skills.Professional proficiency inEnglish; certifications such asOSCP, eWPT, CEH, or GWAPTare a plus.What can we offer??? 23 days of Annual Leave plus the 24th and 31st of December as discretionary days!?? Numerous benefits (Health Care Plan, teleworking compensation, Life and Accident Insurances).`Retribución Flexible ? Program: (Meals, Kinder Garden, Transport, online English lessons, Health Care Plan...)Free access to several training platformsProfessional stability and career plansUST also, compensates referrals from which you could benefit when you refer professionals.The option to pick between 12 or 14 payments along the year.Real Work Life Balance measures (flexibility, WFH or remote work policy, compacted hours during summertime...)UST Club Platform discounts and gym Access discountsIf you would like to know more, don't hesitate to apply and we'll get in touch to fill you in detail.We are waiting for you!In UST we are committed to equal opportunities in our selection processes and do not discriminate based on race, gender, disability, age, religion, sexual orientation or nationality.We have a special commitment to Disability & Inclusion, so we are interested in hiring people with disability certificate.


## Related Videos

- [How to Cause (or Prevent) a Massive Data Breach- Secure Coding and IDOR](https://www.wearedevelopers.com/videos/39-how-to-cause-or-prevent-a-massive-data-breach-secure-coding-and-idor)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [It's a (testing) trap! - Common testing pitfalls and how to solve them](https://www.wearedevelopers.com/videos/1193-it-s-a-testing-trap-common-testing-pitfalls-and-how-to-solve-them)
- [No More Post-its: Boost your login security with APIs](https://www.wearedevelopers.com/videos/1043-no-more-post-its-boost-your-login-security-with-apis)

## Related Articles

- [The 8 Best Code Testing Tools](https://www.wearedevelopers.com/magazine/402-the-8-best-code-testing-tools)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs)
- [11 Best Practices For PHP Security](https://www.wearedevelopers.com/magazine/90-11-best-practices-for-php-security)
- [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)