> Markdown version of [/jobs/ext/2938333-pentesting-engineer-gmv](https://www.wearedevelopers.com/jobs/ext/2938333-pentesting-engineer-gmv). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Pentesting Engineer - Gmv

- **Company:** Gmv
- **Location:** Madrid, Spain (Remote available)
- **Contract:** Temporary contract
- **Skills:** Active Directory, Artificial Intelligence, Amazon Web Services, Software System Penetration Testing, Microsoft Azure, Bash Shell, Cloud Computing, Python (Programming Language), Open Web Application Security, Windows PowerShell, Red Team (Cyber Security), Web Applications, Wireless Networks, Working Model 2D, Scripting, Google Cloud, Cloud Platform System, Mitre Att&ck, Purple Team (Cyber Security)
- **Published:** September 16, 2026
- **Apply:** https://www.buscojobs.com.es/pentesting-engineer-gmv-en-madrid-ID-372112355

## About the Role

Requisitos principalesCybersecurity or related degree with hands-on pentesting experience in networks, web/mobile apps, cloud (AWS, Azure, GCP), Active Directory, and wireless networks
Experience in Red Team exercises including planning, executing simulated attacks, evasion, persistence, and exploitation
Scripting skills (Python, Bash, PowerShell) for automation of offensive tasks
Knowledge of PTES, MITRE ATT&CK, OWASP (asset)
Team collaboration
Strong communication
Problem solving
Penetration testing
Cloud environments (AWS, Azure, GCP)
Active Directory

## Description

OverviewAs a Pentesting Engineer at GMV, you will conduct pen-testing and security assessments across web, mobile, network, and cloud environments, including AI models.You will engage in Red Team exercises to simulate real attacks and Purple Team collaborations to strengthen detection and response.You report vulnerabilities and propose mitigations while aligning with IT and security teams to enforce best practices.The role offers hybrid work, international mobility, and a mission-driven environment focused on defense and threat remediation.Compensaciones / BeneficiosHybrid working modelTeleworking up to 8 weeks/yearFlexible start/finish timesRelocation packageCompetitive compensation with reviewsWellbeing program (health, dental, mental health, training)ResponsabilidadesPerform penetration tests on web applications, mobile apps, networks, Wi?Fi, cloud environments, and AI modelsParticipate in Red Team exercises to simulate attacks and Purple Team activities with defensive teamsIdentify vulnerabilities and provide actionable remediation recommendationsCollaborate with IT and cybersecurity teams to implement security best practicesRequisitos principalesCybersecurity or related degree with hands-on pentesting experience in networks, web/mobile apps, cloud (AWS, Azure, GCP), Active Directory, and wireless networksExperience in Red Team exercises including planning, executing simulated attacks, evasion, persistence, and exploitationScripting skills (Python, Bash, PowerShell) for automation of offensive tasksKnowledge of PTES, MITRE ATT&CK, OWASP (asset)Team collaborationStrong communicationProblem solvingPenetration testingCloud environments (AWS, Azure, GCP)Active Directory


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Old tools, new tricks](https://www.wearedevelopers.com/videos/1916-old-tools-new-tricks)
- [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java)
- [It's a (testing) trap! - Common testing pitfalls and how to solve them](https://www.wearedevelopers.com/videos/1193-it-s-a-testing-trap-common-testing-pitfalls-and-how-to-solve-them)
- [MCP doesn’t suck — your agent does](https://www.wearedevelopers.com/videos/100202-mcp-doesn-t-suck-your-agent-does)
- [Intermediate Bitcoin Script](https://www.wearedevelopers.com/videos/25-intermediate-bitcoin-script)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [The 8 Best Code Testing Tools](https://www.wearedevelopers.com/magazine/402-the-8-best-code-testing-tools)
- [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)