On-Site Senior Offensive Web & API Security Consultant

Google; España; A distancia; EUR 88.000 - 90.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Equity

Bonus target

Benefits

Descripción de la vacante

Google is seeking an on-site security specialist to lead advanced web application and API exploitation within Red Team engagements for Google Cloud and Mandiant customers.

You will dig deep to identify high-severity flaws, craft novel attack vectors, and deliver precise remediation guidance to executives and developers alike. This role emphasizes hands-on hacking and security research with real impact.

Formación

• Bachelor's degree or equivalent practical experience in Computer Science, Cybersecurity, or a related field.
• 5 years of experience in offensive security, focused on manual web application pen testing and API testing.
• Experience with OS security across Linux, Windows, and macOS.
• Experience delivering reports to technical and executive audiences.
• Preferred certifications: OSWE, GWAPT, OSCP, eWPTX, or CCT APP.
• Experience assessing cloud security environments, including GCP.
• Proficiency in scripting/programming languages such as Python, JavaScript, or Go.
• Understanding OWASP Top 10 and modern JS/SPA, GraphQL, REST, and microservices.

Responsabilidades

• Participate in external phases of large Red Team assessments using web app compromise to establish footholds.
• Conduct in-depth, manual pen testing of web apps, APIs, microservices, and mobile backends.
• Conduct network and infrastructure pen testing as part of client assessments.
• Dedicate time to security research, finding new exploitation techniques and creating tools.
• Author detailed, technical reports with exploitation steps and remediation advice for developers and executives.
• Act as technical lead, scoping projects, guiding delivery, and mentoring juniors.

Conocimientos

Offensive security

Web app pen testing

API testing

OS security

Technical reporting

GCP security

Scripting languages

OWASP Top 10

Security research

Educación

Bachelor's degree or equivalent

Descripción del empleo

Google is seeking an on-site security specialist to lead advanced web application and API exploitation within Red Team engagements for Google Cloud and Mandiant customers.

You will dig deep to identify high-severity flaws, craft novel attack vectors, and deliver precise remediation guidance to executives and developers alike. This role emphasizes hands-on hacking and security research with real impact.