Hybrid Penetration Tester: Web & API Security Strategist

Swiss Re - Schweizerische Rückversicherungs-Gesellschaft; Madrid; Híbrido; EUR 42.000 - 70.000; Jornada completa

Descripción de la vacante

Swiss Re is seeking a hands-on Penetration Tester in Madrid to strengthen and execute security assessments of web applications, APIs, and infrastructure, coordinating remediations with internal teams and external partners.

You will join the Penetration Testing team within the GSTP division, applying OWASP Top 10 guidance and modern testing tools in a hybrid setup that balances office and home-based work while driving continuous security improvements.

Formación

• At least 2 years of experience in information security and penetration testing.
• Good understanding of software development and architecture.
• Sound understanding of security frameworks (ISO27001/2, NIST, OWASP Top 10).
• Experience with vulnerability management and penetration testing tools (Burp Suite, nmap, Qualys, etc.).
• Exposure to AI/LLM security concepts or a strong interest in learning about securing AI-enabled applications and agentic systems.
• Analytical thinking and a structured approach to complex matters.
• Ability to communicate complex technical concepts clearly to business and technical audiences.
• Proficiency in English; other languages are a plus.
• A collaborative, international mindset and a drive to improve continuously.

Responsabilidades

• Continuously improve existing processes and develop long-term strategy for the penetration testing service.
• Own, perform and deliver security assessments of web applications, APIs and infrastructure, and coordinate remediation of findings.
• Compile lessons-learnt sessions and educational material for IT developers and other relevant parties.
• Manage relations with internal partners and external security companies providing penetration tests.
• Cooperate with global teams from IT application owners, information security specialists and CISOs.
• Be proactive, curious, and relentlessly seek better methods.
• Apply OWASP Top 10 guidance, testing procedures and remediation recommendations.

Conocimientos

Penetration testing

Information security

Security frameworks

OWASP Top 10

Vulnerability management

AI/LLM security

Communication

Teamwork

Curiosity

Herramientas

Burp Suite

nmap

Qualys

Descripción del empleo

Swiss Re is seeking a hands-on Penetration Tester in Madrid to strengthen and execute security assessments of web applications, APIs, and infrastructure, coordinating remediations with internal teams and external partners.

You will join the Penetration Testing team within the GSTP division, applying OWASP Top 10 guidance and modern testing tools in a hybrid setup that balances office and home-based work while driving continuous security improvements.