> Markdown version of [/jobs/ext/2762292-senior-pentester](https://www.wearedevelopers.com/jobs/ext/2762292-senior-pentester). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Pentester

- **Company:** Gmv
- **Location:** Madrid, Spain (Remote available)
- **Contract:** Permanent contract
- **Skills:** Active Directory, Artificial Intelligence, Amazon Web Services, Software System Penetration Testing, Microsoft Azure, Bash Shell, Burp Suite, Cloud Computing, Intrusion Detection and Prevention, Mobile Application Software, Python (Programming Language), Nmap, Open Web Application Security, Windows PowerShell, Red Team (Cyber Security), Computer Networking Systems, Google Cloud, Cloud Platform System, Large Language Models, Mitre Att&ck, Metasploit, Purple Team (Cyber Security), Blue Team (Cyber Security)
- **Published:** September 6, 2026
- **Apply:** https://www.buscojobs.com.es/senior-pentester-en-madrid-ID-369542685

## About the Role

QUALIFICATIONS 5+ years of experience in penetration testing (web, mobile, network, cloud, Active Directory, Wi?Fi).
Experience in Red Team operations designing and executing simulated attacks.
Advanced knowledge of tools such as Burp Suite, Nmap, Metasploit or C2 frameworks.
Ability to automate offensive tasks through scripting (Python, Bash or PowerShell).
Experience producing technical and executive reports focused on risk.
Strong communication skills and ability to present results clearly.
Experience managing cybersecurity or technical audit projects.
Offensive certifications such as OSCP, OSEP, OSWE, eCPPT, CRTP or equivalent.
Knowledge of frameworks and methodologies such as PTES, MITRE ATT&CK or OWASP.
Experience assessing security in AI or LLM?based systems (OWASP Top 10 for LLMs).

## Description

Do you want to participate in advanced offensive security assessments?The GMV Technical Audits team is looking for you!We like to get straight to the point and tell you what you won't find online.If you'd like to learn more about us, visit the GMV website.WHAT CHALLENGE WILL YOU TAKE ON?As a Senior Pentester , you will not only execute technical assessments but also design realistic attack scenarios based on MITRE ATT&CK TTPs and lead audit projects, helping organizations understand how they could be compromised before a real attacker does.You will work on web and mobile applications, network infrastructures, Wi?Fi networks, cloud environments (AWS, Azure, GCP), Active Directory and AI?based systems.You will also participate in Red Team and Purple Team exercises , simulating real attacks and collaborating with Blue Team professionals to improve threat detection and response capabilities.DAY?TO?DAY RESPONSIBILITIES Execute and lead penetration tests in complex corporate environments.Participate in Red Team exercises, applying evasion techniques against EDR, XDR, WAF and antivirus solutions.Identify vulnerabilities, analyze their impact and propose effective mitigation strategies.Develop or adapt offensive tools and automations using Python, Bash or PowerShell.Produce clear technical and executive reports focused on risk.Present findings to both technical and business audiences.Manage technical audit projects, coordinating scope, timelines and deliverables.QUALIFICATIONS 5+ years of experience in penetration testing (web, mobile, network, cloud, Active Directory, Wi?Fi).Experience in Red Team operations designing and executing simulated attacks.Advanced knowledge of tools such as Burp Suite, Nmap, Metasploit or C2 frameworks.Ability to automate offensive tasks through scripting (Python, Bash or PowerShell).Experience producing technical and executive reports focused on risk.Strong communication skills and ability to present results clearly.Experience managing cybersecurity or technical audit projects.Offensive certifications such as OSCP, OSEP, OSWE, eCPPT, CRTP or equivalent.Knowledge of frameworks and methodologies such as PTES, MITRE ATT&CK or OWASP.Experience assessing security in AI or LLM?based systems (OWASP Top 10 for LLMs).BENEFITS Hybrid work model and up to 8 weeks per year of remote work outside your usual geographical area.Flexible working hours and intensive working days on Fridays and during summer.A personalized career development plan, training opportunities and language learning support.National and international mobility.Coming from another country?We offer a relocation package.Competitive salary with continuous reviews, flexible compensation and brand discounts.Wellbeing program: health, dental and accident insurance; free fruit and coffee; physical, mental and financial wellbeing initiatives.Throughout our recruitment process you will always have direct contact with our talent acquisition team, either by phone or in person/online.We will never request


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Old tools, new tricks](https://www.wearedevelopers.com/videos/1916-old-tools-new-tricks)
- [It's a (testing) trap! - Common testing pitfalls and how to solve them](https://www.wearedevelopers.com/videos/1193-it-s-a-testing-trap-common-testing-pitfalls-and-how-to-solve-them)
- [MCP doesn’t suck — your agent does](https://www.wearedevelopers.com/videos/100202-mcp-doesn-t-suck-your-agent-does)
- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)
- [Reusing apps between teams and environments through Containers](https://www.wearedevelopers.com/videos/107-reusing-apps-between-teams-and-environments-through-containers)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [The 8 Best Code Testing Tools](https://www.wearedevelopers.com/magazine/402-the-8-best-code-testing-tools)
- [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Best Coding Boot Camps in Germany](https://www.wearedevelopers.com/magazine/237-best-coding-boot-camps-in-germany)