Hybrid Offensive Security Tester – Web, Mobile & API

Thales Avionics, Inc. (AGS); Madrid; Hybrid; EUR 55,000 - 85,000; Full time

Benefits offered by this job

Hybrid work model

Performance-based bonuses

Annual training plan and certification

Job summary

Thales in Spain is seeking an Offensive Security professional with hands‑on penetration testing experience to join our cybersecurity team in Madrid. You will be involved in the full lifecycle of security assessments, from technical execution and vulnerability analysis to reporting and presenting findings to clients.

Key responsibilities include infrastructure, web and mobile application testing, API and PCI‑related assessments, and ongoing development of testing techniques.

Qualifications

• 3+ years of experience in penetration testing and technical security assessments.
• Experience assessing infrastructures, web and mobile applications, and APIs.
• Experience working directly with clients.
• Strong communication and presentation skills.
• English B2 or above.
• University degree in Information Technology, Cybersecurity or a related field.

Responsibilities

• Perform internal and external infrastructure penetration testing.
• Conduct web, mobile, API and PCI‑related security assessments.
• Report findings and present to clients with clear remediation guidance.
• Contribute to development of offensive security methodologies and services.
• Collaborate with the cybersecurity team to improve testing procedures.

Skills

Penetration testing

Information security

Client communication

Presentation skills

English communication (B2)

Education

Bachelors in Information Technology/Cybersecurity or related field

Job description

Thales in Spain is seeking an Offensive Security professional with hands‑on penetration testing experience to join our cybersecurity team in Madrid. You will be involved in the full lifecycle of security assessments, from technical execution and vulnerability analysis to reporting and presenting findings to clients.

Key responsibilities include infrastructure, web and mobile application testing, API and PCI‑related assessments, and ongoing development of testing techniques.