Hybrid Penetration Tester: Web & API Security Expert

Swiss Re; Madrid; Híbrido; EUR 42.000 - 70.000; Jornada completa

Descripción de la vacante

Swiss Re is seeking an experienced Penetration Tester to enhance and shape the pentest strategy across web applications, APIs, and infrastructure. You will coordinate remediation work and align with IT and security teams to strengthen our defenses.

You will join a team within the Group Security & Technology Platforms (GSTP) division in a hybrid setup, balancing home and office work. Strong English, 2+ years in security testing, and OWASP knowledge are essential.

Formación

• Minimum 2 years of experience in information security and penetration testing.
• Strong understanding of software development and architecture.
• Familiarity with security frameworks (ISO27001/2, NIST).
• Experience with vulnerability management and testing tooling (Burp Suite, Nmap, Qualys).

Responsabilidades

• Continuously improve processes and develop the long-term penetration testing strategy.
• Conduct security assessments of web applications, APIs, and infrastructure; deliver reports.
• Coordinate remediation of findings with delivery teams and stakeholders.
• Create lessons-learned materials for IT developers and other relevant parties.
• Collaborate with internal partners and external security vendors.
• Engage with global IT teams and security officers to drive improvements.
• Apply OWASP Top 10 knowledge to testing and remediation recommendations.

Conocimientos

Information security

Penetration testing

OWASP Top 10

English communication

Herramientas

Burp Suite

Nmap

Qualys

Descripción del empleo

Swiss Re is seeking an experienced Penetration Tester to enhance and shape the pentest strategy across web applications, APIs, and infrastructure. You will coordinate remediation work and align with IT and security teams to strengthen our defenses.

You will join a team within the Group Security & Technology Platforms (GSTP) division in a hybrid setup, balancing home and office work. Strong English, 2+ years in security testing, and OWASP knowledge are essential.