Ingeniero / a pentesting

GMV; l'Hospitalet de Llobregat; Híbrido; EUR 40.000 - 60.000; Jornada completa

Descripción de la vacante

A leading technology company in l'Hospitalet de Llobregat is seeking a Pentesting Engineer to join their Technical Audits team. You will conduct advanced security analysis, including penetration testing across various environments and participate in Red Team exercises. Ideal candidates should have an engineering degree, experience in pentesting, and familiarity with various security tools. The role offers a hybrid work model with competitive salary and personal development opportunities.

Servicios

Hybrid work model

Flexible hours

Personalized career development plans

Competitive salary with regular reviews

Wellbeing program including health and wellness support

Formación

• Experience in pentesting various environments and applications.
• Familiarity with methodologies like PTES, MITRE ATT&CK, OWASP.
• Scripting knowledge (Python, Bash, PowerShell) for automation.

Responsabilidades

• Conduct penetration tests on web/mobile applications and infrastructure.
• Participate in Red Team and Purple Team exercises.
• Identify vulnerabilities and propose technical mitigations.
• Collaborate with IT and cybersecurity teams to implement best practices.
• Write technical reports with findings and remediation plans.

Conocimientos

Pentesting infrastructure, web / mobile apps, cloud, Active Directory, and Wi-Fi networks.

Red Team operations using evasion, persistence, and exploitation techniques.

Proficiency with tools like Burp Suite, Nmap, Metasploit.

Ability to communicate technical findings and risks to varied audiences.

Critical thinking, complex problem-solving skills, and goal-oriented mindset.

Educación

Engineering degree

Herramientas

Burp Suite

Nmap

Metasploit

Descripción del empleo

Overview

Pentesting engineer

If you hear 'server side request forgery' and get more excited than watching the GTA VI trailer, GMV is the place for you!

Join our Technical Audits team to carry out advanced offensive security analysis, including pentesting, Red Team, and assessments across infrastructure, applications, cloud environments, and emerging technologies like AI.

We like to get straight to the point—no fluff. Want to learn more about us? Visit the .

WHAT CHALLENGE WILL YOU TAKE ON?

You'll be part of an amazing team performing tasks like:

• Conducting penetration tests on web / mobile applications, infrastructure, Wi-Fi, cloud (AWS, Azure, GCP), and AI environments.
• Participating in Red Team (simulated attacks) and Purple Team (collaboration with defensive teams) exercises.
• Identifying vulnerabilities and proposing technical mitigations.
• Collaborating with IT and cybersecurity teams to implement best practices.
• Writing technical reports with findings, risk analysis, and remediation plans.

WHAT DO WE NEED IN OUR TEAM?

We're looking for engineering graduates with experience in :

• Pentesting infrastructure, web / mobile apps, cloud, Active Directory, and Wi-Fi networks.
• Red Team operations using evasion, persistence, and exploitation techniques.
• Certifications such as OSCP , OSEP, OSWE, CRTP, eCPPT...
• Proficiency with tools like Burp Suite , Nmap, Metasploit, among others.
• Ability to communicate technical findings and risks to varied audiences.
• Critical thinking, complex problem-solving skills, and goal-oriented mindset.

We also value :

• Scripting knowledge (Python, Bash, PowerShell) for automation.
• Familiarity with methodologies like PTES, MITRE ATT&CK, OWASP.

WHAT DO WE OFFER?

• Hybrid work model and 8 weeks per year of remote work outside your usual geographic area.
• Flexible hours with intensive workdays on Fridays and during summer.
• Personalized career development plans , training, and language learning support.
• National and international mobility . Relocation package available if you're moving from abroad.
• Competitive salary with regular reviews, flexible compensation, and discounts with top brands.
• Wellbeing program : health, dental, and accident insurance; free fruit and coffee; health, mental and financial wellness training, and much more!

Our recruitment process always includes phone and personal (onsite or online) contact with our Talent Acquisition team. We will never ask for bank details or transfers. If you’re contacted through a different process, please reach out to the recruitment manager.

We promote equal opportunity hiring and are committed to inclusion and diversity.