> Markdown version of [/jobs/ext/2760358-penetration-testing-team-lead](https://www.wearedevelopers.com/jobs/ext/2760358-penetration-testing-team-lead). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Penetration Testing Team Lead

- **Company:** Ing
- **Location:** Madrid, Spain
- **Contract:** Permanent contract
- **Skills:** Software System Penetration Testing, Cloud Computing Security, Software Vulnerability Management, Devsecops
- **Published:** September 6, 2026
- **Apply:** https://www.buscojobs.com.es/penetration-testing-team-lead-en-madrid-ID-370107451

## About the Role

Extensive experience in penetration testing and vulnerability management
Experience leading teams and mentoring engineers
Strong knowledge of application, infrastructure and cloud security
Experience in building testing processes and standards
Strong communication and stakeholder management skills
Certifications:
Hands-on: OSWE, OSEP, eWPTX, CPTS
Governance / leadership: CISSP, CISM, CISA
You'll get extra points for:
Experience scaling pentesting functions
Risk-based vulnerability management
DevSecOps integration
Cloud security experience
Experience in regulated environments
#LI-DNI

## Description

At ING Hubs Spain we are looking for a Penetration Testing Team LeadYour role and work environment:We are looking for a talented and enthusiastic Team Lead to join and lead our Offensive Security Center of Expertise at ING Hubs Spain.As a Penetration Testing Team Lead within our global CISO organization, you will be responsible for driving and scaling penetration testing capabilities across the organization, ensuring consistent, high-quality security assessments.Your key responsibilities:Lead and manage a team of pentesters, including mentoring and developmentDefine and maintain penetration testing methodologies and standardsOversee end-to-end penetration testing engagementsEnsure high-quality reporting and risk evaluationCollaborate with engineering teams to improve security postureCollaborate with engineering teams to ensure security testing is effectively integrated into delivery processesDrive continuous improvement and automationEnsure consistency of penetration testing practices across global teams through collaboration and standardizationWhat are we looking for?Want to know if this job is made for you? These are some of the qualities that we value the most for this role. And if the shoe fits... don't hesitate to apply!Extensive experience in penetration testing and vulnerability managementExperience leading teams and mentoring engineersStrong knowledge of application, infrastructure and cloud securityExperience in building testing processes and standardsStrong communication and stakeholder management skillsCertifications:Hands-on: OSWE, OSEP, eWPTX, CPTSGovernance / leadership: CISSP, CISM, CISAYou'll get extra points for:Experience scaling pentesting functionsRisk-based vulnerability managementDevSecOps integrationCloud security experienceExperience in regulated environments#LI-DNI


## Related Videos

- [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [A Computer Is All You Need](https://www.wearedevelopers.com/videos/100142-a-computer-is-all-you-need)
- [What is the real price of one successful line of code?](https://www.wearedevelopers.com/videos/1921-what-is-the-real-price-of-one-successful-line-of-code)
- [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture)
- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [The 8 Best Code Testing Tools](https://www.wearedevelopers.com/magazine/402-the-8-best-code-testing-tools)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)
- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [What’s the Difference between a Junior, Mid, and Senior Developer?](https://www.wearedevelopers.com/magazine/238-what-s-the-difference-between-a-junior-mid-and-senior-developer)