Senior Pentester - Tres Cantos

OverviewAs a Senior Pentester, you will lead offensive security assessments and design realistic attack scenarios using MITRE ATT&CK, guiding audit projects for organizations aiming to understand vulnerabilities before real attackers exploit them.You will work across web, mobile, network, cloud, AD, and AI-based systems, and participate in Red Team and Purple Team exercises to boost detection and response.You will translate findings into practical mitigation and contribute to risk-focused reports for technical and business audiences.This role offers collaboration with cross-functional teams and a chance to shape security practices at scale.Compensaciones / Beneficioshybrid work modelremote work up to 8 weeks/yearflexible working hoursrelocation packagetraining opportunitieswellbeing programResponsabilidadesLead penetration tests in complex corporate environmentsParticipate in Red Team exercises and apply evasion against EDR, XDR, WAF, and AVsIdentify vulnerabilities, assess impact and propose mitigationsDevelop or adapt offensive tools and automations (Python, Bash, PowerShell)Produce technical and executive risk-focused reportsPresent findings to technical and business audiencesManage audit projects, including scope, timelines and deliverablesRequisitos principales5+ years in penetration testing (web, mobile, network, cloud, AD, Wi-Fi)Experience in Red Team operationsAdvanced knowledge of Burp Suite, Nmap, Metasploit or C2 frameworksAutomation of offensive tasks via scripting (Python, Bash, PowerShell)Experience producing technical and executive risk reportsStrong communication and clear presentation of resultsExperience managing cybersecurity or technical audit projectsOffensive certifications (OSCP, OSEP, OSWE, eCPPT, CRTP or equivalent)Knowledge of PTES, MITRE ATT&CK, OWASPExperience assessing security in AI/LLM-based systems (OWASP Top 10 for LLMs)Strong communicationIndependent leadershipCross-functional collaborationBurp SuiteNmapMetasploit

Experience in Red Team operations Advanced knowledge of Burp Suite, Nmap, Metasploit or C2 frameworks Automation of offensive tasks via scripting (Python, Bash, PowerShell) Experience producing technical and executive risk reports Strong communication and clear presentation of results Experience managing cybersecurity or technical audit projects Offensive certifications (OSCP, OSEP, OSWE, eCPPT, CRTP or equivalent) Knowledge of PTES, MITRE ATT&CK, OWASP Experience assessing security in AI/LLM-based systems (OWASP Top 10 for LLMs) Strong communication Independent leadership Cross-functional collaboration Burp Suite Nmap Metasploit