Hybrid Senior Penetration Tester: Lead Red Team Ops

GMV Spain; Madrid; Híbrido; EUR 70.000 - 100.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Hybrid work model

Relocation package

Wellbeing program

Language learning support

Descripción de la vacante

GMV Spain is seeking a Senior Pentester to design realistic attack scenarios and lead offensive security assessments across web, mobile, network, cloud, and AI-based systems. You will collaborate with Red Team and Blue Team professionals to strengthen threat detection and response capabilities.

The role emphasizes independent leadership of security audits, development of offensive tools, and clear risk-focused reporting to technical and business audiences.

Formación

• 5+ years of penetration testing across web, mobile, network, and cloud.
• Experience in Red Team operations designing and executing simulated attacks.
• Advanced knowledge of Burp Suite, Nmap, Metasploit, or C2 frameworks.
• Ability to automate offensive tasks through scripting (Python, Bash or PowerShell).
• Experience producing technical and executive reports focused on risk.

Responsabilidades

• Execute and lead penetration tests in complex corporate environments.
• Participate in Red Team exercises, applying evasion techniques against EDR, XDR, WAF and antivirus solutions.
• Identify vulnerabilities, analyze their impact and propose effective mitigation strategies.
• Develop or adapt offensive tools and automations using Python, Bash or PowerShell.
• Produce clear technical and executive reports focused on risk.
• Present findings to both technical and business audiences.
• Manage technical audit projects, coordinating scope, timelines and deliverables.

Conocimientos

Penetration testing

Red Team operations

Automation scripting

Technical reporting

Communication

Project leadership

Herramientas

Burp Suite

Nmap

Metasploit

C2 frameworks

Python

PowerShell

Descripción del empleo

GMV Spain is seeking a Senior Pentester to design realistic attack scenarios and lead offensive security assessments across web, mobile, network, cloud, and AI-based systems. You will collaborate with Red Team and Blue Team professionals to strengthen threat detection and response capabilities.

The role emphasizes independent leadership of security audits, development of offensive tools, and clear risk-focused reporting to technical and business audiences.