Offensive Security Auditor / Penetration Tester

Thales Avionics, Inc. (AGS); Madrid; Hybrid; EUR 55,000 - 85,000; Full time

Benefits offered by this job

Hybrid work model

Performance-based bonuses

Annual training plan and certification

Job summary

Thales in Spain is seeking an Offensive Security professional with hands‑on penetration testing experience to join our cybersecurity team in Madrid. You will be involved in the full lifecycle of security assessments, from technical execution and vulnerability analysis to reporting and presenting findings to clients.

Key responsibilities include infrastructure, web and mobile application testing, API and PCI‑related assessments, and ongoing development of testing techniques.

Qualifications

• 3+ years of experience in penetration testing and technical security assessments.
• Experience assessing infrastructures, web and mobile applications, and APIs.
• Experience working directly with clients.
• Strong communication and presentation skills.
• English B2 or above.
• University degree in Information Technology, Cybersecurity or a related field.

Responsibilities

• Perform internal and external infrastructure penetration testing.
• Conduct web, mobile, API and PCI‑related security assessments.
• Report findings and present to clients with clear remediation guidance.
• Contribute to development of offensive security methodologies and services.
• Collaborate with the cybersecurity team to improve testing procedures.

Skills

Penetration testing

Information security

Client communication

Presentation skills

English communication (B2)

Education

Bachelors in Information Technology/Cybersecurity or related field

Job description

Location: Madrid Emilio Vargas, Spain

Thales people architect identity management and data protection solutions at the heart of digital security. Business and governments rely on us to bring trust to the billions of digital interactions they have with people. Our technologies and services help banks exchange funds, people cross borders, energy become smarter and much more. More than 30,000 organizations already rely on us to verify the identities of people and things, grant access to digital services, analyze vast quantities of information and encrypt data to make the connected world more secure.

Thales in Spain is a leader in technological solutions applied to Defence, Aeronautics, Security, Transportation and Space and, furthermore, is a global centre for excellence in Space, Security of Critical Infrastructures and Transportation. With a turnover of €320 million and a staff of 1,200, it exports approximately 40% of its total production principally to the Middle East, North Africa and Latin America.

We are looking for an Offensive Security professional with hands‑on experience in penetration testing who is ready to take on new technical challenges and join our cybersecurity team.

You will be involved throughout the full lifecycle of security assessments, from technical execution and vulnerability analysis to reporting and presenting findings to clients.

What will you be working on?

• Internal and external infrastructure penetration testing
• Web application security assessments
• Mobile application testing for iOS and Android
• API security testing
• Wi‑Fi penetration testing
• PCI‑related security assessments
• Research and development of new penetration testing techniques and methodologies
• Continuous improvement of existing Offensive Security methodologies and procedures
• Collaboration in the development of new Offensive Security services

What are we looking for?

• 3+ years of experience in penetration testing and technical security assessments
• Strong knowledge of information security and Offensive Security
• Experience assessing infrastructures, web and mobile applications, and APIs
• Experience working directly with clients
• Strong communication and presentation skills
• English B2 or above
• University degree in Information Technology, Cybersecurity or a related field
• Availability to travel when required

Nice to have

Security certifications such as OSCP, CRTO, or equivalent advanced Offensive Security certifications will be highly valued.

Why Join Thales?

• Hybrid work model
• Up to 41 Days Off Per Year
• 24 vacation days + additional flexible days
• Option to enjoy one free Friday per month (12 per year)
• Choose between summer reduced hours or extra days of

Flexible Compensation Package

Optimize your net salary with benefits such as meal vouchers, transport cards, childcare vouchers, and training support.

Continuous Learning & Certifications

Access to an annual training plan including technical certifications, languages, and soft skills.

Knowledge Sharing Culture

Participate in our voluntary Speakers Program and share your expertise.

Performance-Based Bonuses

Clear and transparent objectives aligned with KPI-based annual bonuses.

Career Growth Your Way

Choose your path:

• Leadership and team management
• Deep technical specialization with top experts

If Offensive Security is your field and you are looking for a new challenge where you can continue developing your technical expertise while working on diverse cybersecurity projects, we'd love to hear from you.

At Thales we provide CAREERS and not only jobs. With Thales employing 80,000 employees in 68 countries our mobility policy enables thousands of employees each year to develop their careers at home and abroad, in their existing areas of expertise or by branching out into new fields. Together we believe that embracing flexibility is a smarter way of working. Great journeys start here,