Hybrid Senior Pentester & Red Team Lead

GMV Spain; Tres Cantos; Híbrido; EUR 70.000 - 110.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Hybrid work model

8 weeks teleworking per year

Relocation package

Flexible hours

Descripción de la vacante

GMV Spain is seeking a Senior Pentester to design realistic attack scenarios and lead audits across web, mobile, network, cloud and AI systems. You will drive Red Team and Purple Team exercises, coordinating with Blue Team to improve detection and response.

Ideal candidates bring 3+ years in pentesting, strong tool experience (Burp Suite, Nmap, Metasploit) and a track record of delivering risk-focused reports. Relocation support and a hybrid Spain-based role are offered.

Formación

• 3+ years of experience in penetration testing (web, mobile, network, cloud, AD, Wi‑Fi).
• Experience in Red Team operations designing and executing simulated attacks.
• Advanced knowledge of Burp Suite, Nmap, Metasploit or C2 frameworks.
• Automate offensive tasks with Python, Bash or PowerShell.
• Experience producing technical and executive reports focused on risk.
• Strong communication and ability to present results clearly.
• Experience managing cybersecurity or technical audit projects.
• Offensive certifications such as OSCP, OSEP, OSWE, eCPPT or equivalent.
• Knowledge of PTES, MITRE ATT&CK or OWASP.
• Experience assessing security in AI or LLM-based systems.

Responsabilidades

• Lead penetration tests in complex corporate environments.
• Participate in Red Team exercises, applying evasion techniques against EDR/XDR/WAF/AV.
• Identify vulnerabilities, analyze impact and propose mitigations.
• Develop offensive tools and automations using Python, Bash or PowerShell.
• Produce technical and executive risk reports.
• Present findings to technical and business audiences.
• Manage cybersecurity audit projects with scope, timelines, and deliverables.

Conocimientos

Penetration testing

Red Team operations

Python scripting

Communication skills

Project leadership

Threat modeling

Herramientas

Burp Suite

Nmap

Metasploit

C2 frameworks

PowerShell

Descripción del empleo

GMV Spain is seeking a Senior Pentester to design realistic attack scenarios and lead audits across web, mobile, network, cloud and AI systems. You will drive Red Team and Purple Team exercises, coordinating with Blue Team to improve detection and response.

Ideal candidates bring 3+ years in pentesting, strong tool experience (Burp Suite, Nmap, Metasploit) and a track record of delivering risk-focused reports. Relocation support and a hybrid Spain-based role are offered.