Hybrid Penetration Tester: AI-Driven Security & APIs

Swiss Re; Madrid; Híbrido; EUR 42.000 - 70.000; Jornada completa

Descripción de la vacante

Swiss Re seeks a seasoned Penetration Tester to strengthen security across web apps, APIs, networks and AI/LLM systems. You will lead testing, coordinate remediations and help shape our testing strategy in a hybrid setup.

Collaborate with global IT teams, apply OWASP Top 10 as a baseline, and contribute to building AI-driven testing tools. English proficiency required; certifications are a plus.

Formación

• At least 5 years of information security and penetration testing experience.
• Good understanding of software development and architecture.
• Strong programming and scripting knowledge.
• Sound understanding of security frameworks (ISO27001/2, NIST, OWASP Top 10).
• Experience with vulnerability management and testing tools such as Burp Suite, Nmap, Qualys, SQLMap and Kali Linux.

Responsabilidades

• Execute penetration tests across web applications, APIs, networks, mobile, thick clients and AI/LLM-based systems.
• Own, perform and deliver security assessments.
• Develop, maintain and validate AI-driven agents and tools to automate recurring testing tasks.
• Communicate service capabilities and test results effectively to IT owners and stakeholders.
• Compile lessons-learnt sessions and educational material for IT developers and other relevant parties.
• Cooperate closely with global teams from IT application owners, information security specialists and CISOs.
• Be curious, relentlessly seek better testing approaches and continuous improvement.
• Apply OWASP Top 10 vulnerabilities knowledge and remediation recommendations.

Conocimientos

Penetration testing

Information security

Programming & scripting

Cloud security

Communication skills

Herramientas

Burp Suite

Nmap

Qualys

Bruno

Swagger

SQLMap

Kali Linux

Descripción del empleo

Swiss Re seeks a seasoned Penetration Tester to strengthen security across web apps, APIs, networks and AI/LLM systems. You will lead testing, coordinate remediations and help shape our testing strategy in a hybrid setup.

Collaborate with global IT teams, apply OWASP Top 10 as a baseline, and contribute to building AI-driven testing tools. English proficiency required; certifications are a plus.