Pentester

Uk Cyber Defence
Málaga, Spain
5 days ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Working hours
Regular working hours
Languages
English, Spanish
Experience level
Intermediate

Job location

Málaga, Spain

Tech stack

API
Amazon Web Services (AWS)
Software System Penetration Testing
Azure
Bash
Burp Suite
Cloud Computing
Digital Assets
Python
NMap
Open Web Application Security
PCI Data Security Standards
Powershell
Red Team (Cyber Security)
Wireshark
Web Applications
Scripting (Bash/Python/Go/Ruby)
Google Cloud Platform
Mitre Att&ck
Metasploit
Nessus
Purple Team (Cyber Security)
Devsecops
Vulnerability Analysis

Job description

Role OverviewCyber Defence is a fast-growing cybersecurity company on a mission to protect digital assets and build client trust through robust, ethical, and forward-thinking cyber practices. From our office in Pueblo Nuevo, we serve clients across the UK, Spain, and beyond, working with CREST-certified practices and delivering government-grade security services./What You'll Be DoingAs a Pentester at Cyber Defence, you'll play a key role in simulating attacks to identify system vulnerabilities across networks, applications, and cloud infrastructure. This is a hands-on technical role with a strategic impact on our clients' resilience and regulatory compliance.Key ResponsibilitiesPlan and execute manual and automated penetration tests across web apps, networks, and APIs.Perform internal and external vulnerability assessments.Create comprehensive reports on findings with clear mitigation guidance.Collaborate with SOC Analysts, DevSecOps, and IT teams to implement remediations.Stay updated on the latest attack vectors and security research.Support Red Team and Purple Team exercises.Assist with incident response investigations when needed.Skills and QualificationsMust-Haves3+ years of experience in penetration testing or offensive security.Strong understanding of common vulnerabilities (OWASP Top 10, MITRE ATT&CK).Proficiency in tools such as Burp Suite, Nmap, Metasploit, Nessus, and Wireshark.Experience with scripting languages (Python, Bash, PowerShell).Excellent written and verbal communication (English).Eligibility to work in Spain and occasional travel if required.Nice-to-HavesCREST CRT or equivalent (OSCP, OSWE, CEH, etc.).Experience with cloud pentesting (AWS, Azure, GCP).Familiarity with compliance standards (ISO *****, GDPR, NIST, PCI DSS).English & Spanish language skills.OUR BENEFITSBe part of a mission-driven cybersecurity firm with global impact.Work alongside CREST-certified experts and forward-thinking leadership.Professional development budget & certification support.On-site work with flexibility (based out of Pueblo Nuevo office).Vibrant office culture near the coast - good vibes only!About usAt Cyber Defence, our culture is built on trust, innovation, and resilience.We're a small team of passionate professionals driven by a shared mission:To protect and defend businesses from sophisticated digital threats!Collaboration & TeamworkWe believe that the best solutions come from working together. Open communication, mutual respect, and a team-first mentality drive our success. No egos, just a collective drive to deliver the best for our clients.Innovation & Problem-SolvingCyber threats are constantly evolving, and so are we. We encourage creativity and curiosity, empowering our team to explore new ideas and develop long-term solutions, not just quick fixes.Accountability & IntegrityOur clients trust us with their most valuable assets, and we honour that trust through professionalism and transparency. We take ownership, learn from mistakes, and continuously improve.Growth & FlexibilityWe invest in our people through training, mentorship, and professional development. Our flexible work policies support work-life balance, ensuring our team thrives both personally and professionally.A Mission-Driven CultureWhat unites us is a shared mission: to make the digital world safer.Cyber Defence isn't just a place to work, it's where you can make a real impact.

Requirements

Must-Haves 3+ years of experience in penetration testing or offensive security. Strong understanding of common vulnerabilities (OWASP Top 10, MITRE ATT&CK). Proficiency in tools such as Burp Suite, Nmap, Metasploit, Nessus, and Wireshark. Experience with scripting languages (Python, Bash, PowerShell). Excellent written and verbal communication (English). Eligibility to work in Spain and occasional travel if required. Nice-to-Haves CREST CRT or equivalent (OSCP, OSWE, CEH, etc.). Experience with cloud pentesting (AWS, Azure, GCP). Familiarity with compliance standards (ISO *****, GDPR, NIST, PCI DSS). English & Spanish language skills.

About the company

Cyber Defence is a fast-growing cybersecurity company on a mission to protect digital assets and build client trust through robust, ethical, and forward-thinking cyber practices. From our office in Pueblo Nuevo, we serve clients across the UK, Spain, and beyond, working with CREST-certified practices and delivering government-grade security services. / What You'll Be Doing As a Pentester at Cyber Defence, you'll play a key role in simulating attacks to identify system vulnerabilities across networks, applications, and cloud infrastructure. This is a hands-on technical role with a strategic impact on our clients' resilience and regulatory compliance., At Cyber Defence, our culture is built on trust, innovation, and resilience. We're a small team of passionate professionals driven by a shared mission: To protect and defend businesses from sophisticated digital threats! Collaboration & Teamwork We believe that the best solutions come from working together. Open communication, mutual respect, and a team-first mentality drive our success. No egos, just a collective drive to deliver the best for our clients. Innovation & Problem-Solving Cyber threats are constantly evolving, and so are we. We encourage creativity and curiosity, empowering our team to explore new ideas and develop long-term solutions, not just quick fixes. Accountability & Integrity Our clients trust us with their most valuable assets, and we honour that trust through professionalism and transparency. We take ownership, learn from mistakes, and continuously improve. Growth & Flexibility We invest in our people through training, mentorship, and professional development. Our flexible work policies support work-life balance, ensuring our team thrives both personally and professionally. A Mission-Driven Culture What unites us is a shared mission: to make the digital world safer. Cyber Defence isn't just a place to work, it's where you can make a real impact.

Apply for this position