Lead Penetration Tester — Remote & AI‑Driven Security

SITA; Barcelona; On-site; EUR 85,000 - 140,000; Full time

Benefits offered by this job

Flex Week

Flex Day

Flex-Location

Employee Wellbeing

Professional Development

Competitive Benefits

Job summary

SITA is seeking a Lead Penetration Tester to join the Security Assurance & Testing team. You will identify and verify security weaknesses in SITA products and infrastructure, lead tests from scoping to closure, and supervise internal and contracted testers.

The role aims to advance from manual, point-in-time testing to continuous, AI-assisted security testing. You will also communicate findings to developers and management, supervise retests, and help define lessons learned for future test plans

Qualifications

• 5–7 years' experience in security testing (at least one of: network, web/mobile apps, cloud).
• Mastery of Unix/Linux/Windows OS and scripting (Python, Ruby, or Perl).
• Penetration testing certifications are a strong advantage.

Responsibilities

• Run authorized penetration tests on applications, APIs, mobile apps, cloud environments and infra.
• Lead scoping sessions and write pentest plans with required prerequisites.
• Provide technical direction to testers and escalate critical issues.
• Review reports for accuracy and remediation guidance before publication.

Skills

Penetration Testing

Network Security

Cloud Security

Unix/Linux

Scripting

Threat Modeling

OWASP Top 10

AD Security Testing

Education

Masters degree in a technical discipline

Penetration Testing certification (OSCP, GPEN, CRTO)

CISSP / CISA certification (nice to have)

Job description

SITA is seeking a Lead Penetration Tester to join the Security Assurance & Testing team. You will identify and verify security weaknesses in SITA products and infrastructure, lead tests from scoping to closure, and supervise internal and contracted testers.

The role aims to advance from manual, point-in-time testing to continuous, AI-assisted security testing. You will also communicate findings to developers and management, supervise retests, and help define lessons learned for future test plans