> Markdown version of [/jobs/ext/2838020-senior-pentester](https://www.wearedevelopers.com/jobs/ext/2838020-senior-pentester). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior pentester

- **Company:** Solicitante De Empleo
- **Location:** Tres Cantos, Spain (Remote available)
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Software System Penetration Testing, Bash Shell, Burp Suite, Cloud Computing, Python (Programming Language), Nmap, Open Web Application Security, Windows PowerShell, Red Team (Cyber Security), Wi-Fi Technology, Scripting, Large Language Models, Mitre Att&ck, Metasploit, Purple Team (Cyber Security)
- **Published:** September 11, 2026
- **Apply:** https://www.recruit.net/job/senior-pentester-jobs/9C52AB726C3957DB

## About the Role

* 5+ years in penetration testing (web, mobile, network, cloud, AD, Wi-Fi)
 * Experience in Red Team operations
 * Advanced knowledge of Burp Suite, Nmap, Metasploit or C2 frameworks
 * Automation of offensive tasks via scripting (Python, Bash, PowerShell)
 * Experience producing technical and executive risk reports
 * Strong communication and clear presentation of results
 * Experience managing cybersecurity or technical audit projects
 * Offensive certifications (OSCP, OSEP, OSWE, eCPPT, CRTP or equivalent)
 * Knowledge of PTES, MITRE ATT&CK, OWASP
 * Experience assessing security in AI/LLM-based systems (OWASP Top 10 for LLMs)

 * Strong communication
 * Independent leadership
 * Cross-functional collaboration
 * Burp Suite
 * Nmap
 * Metasploit

## Description

As a Senior Pentester, you will lead offensive security assessments and design realistic attack scenarios using MITRE ATT&CK, guiding audit projects for organizations aiming to understand vulnerabilities before real attackers exploit them. You will work across web, mobile, network, cloud, AD, and AI-based systems, and participate in Red Team and Purple Team exercises to boost detection and response. You will translate findings into practical mitigation and contribute to risk-focused reports for technical and business audiences. This role offers collaboration with cross-functional teams and a chance to shape security practices at scale.
Compensaciones / Beneficios

 * hybrid work model
 * remote work up to 8 weeks/year
 * flexible working hours
 * relocation package
 * training opportunities
 * wellbeing program

Responsabilidades

 * Lead penetration tests in complex corporate environments
 * Participate in Red Team exercises and apply evasion against EDR, XDR, WAF, and AVs
 * Identify vulnerabilities, assess impact and propose mitigations
 * Develop or adapt offensive tools and automations (Python, Bash, PowerShell)
 * Produce technical and executive risk-focused reports
 * Present findings to technical and business audiences
 * Manage audit projects, including scope, timelines and deliverables


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Old tools, new tricks](https://www.wearedevelopers.com/videos/1916-old-tools-new-tricks)
- [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java)
- [It's a (testing) trap! - Common testing pitfalls and how to solve them](https://www.wearedevelopers.com/videos/1193-it-s-a-testing-trap-common-testing-pitfalls-and-how-to-solve-them)
- [MCP doesn’t suck — your agent does](https://www.wearedevelopers.com/videos/100202-mcp-doesn-t-suck-your-agent-does)
- [Intermediate Bitcoin Script](https://www.wearedevelopers.com/videos/25-intermediate-bitcoin-script)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)
- [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline)
- [The 8 Best Code Testing Tools](https://www.wearedevelopers.com/magazine/402-the-8-best-code-testing-tools)
- [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)