Penetration Tester

Integrity360; España; Presencial; EUR 40.000 - 70.000; Jornada completa

Descripción de la vacante

A leading cyber security firm in Spain seeks an experienced penetration tester to conduct technical security assessments, perform vulnerability exploitation, and mentor team members. The ideal candidate possesses strong skills in various programming languages and has a solid background in network and information security. A focus on manual testing and a variety of security tools is essential. This role involves international representation and enhancing the company's security methodologies.

Formación

• Solid experience in information security is required.
• Experience as a penetration tester is essential.
• Excellent communication skills are necessary.

Responsabilidades

• Conduct complex technical security assessments of clients' IT systems.
• Review security architecture and application designs, including source code.
• Perform penetration testing and exploit vulnerabilities.

Conocimientos

Information Security Experience

Penetration Testing Experience

Communication Skills

Custom Scripting

Network Security Knowledge

Development Skills in Various Languages

Manual Penetration Testing

Cloud Hosting Knowledge

Educación

IT-related degree or certification

CHECK Team Leader or equivalent

OSCP, CREST, OSCE, or OSWP

Herramientas

Security Auditing Tools

Descripción del empleo

About Us

Integrity360 is one of Europe's leading cyber security specialists operating from office locations across Europe, providing a comprehensive range of professional, support, and managed cyber security services for over 300 clients. We have four Security Operation Centers offering end-to-end security services, including Managed Security, Cyber Security Testing, Incident Response, Security Integration, PCI Compliance, and Cyber Risk & Assurance services.

What sets Integrity360 apart is our excellent team of professionals who drive the business forward. Founded on technical expertise, our team possesses some of the industry's greatest skills and experience. Clients trust us to go above and beyond to meet their needs. We are listed multiple times on Gartner Market Guides for Managed Security Services.

Job Role / Responsibilities

This role involves conducting complex technical security assessments of clients' IT systems, including Internet, Intranet, Applications, Hosts, Firewalls, and Mobile applications, along with related policies and procedures. Responsibilities include communicating findings through reports, training, workshops, and consultations. Projects typically last between one and three weeks, sometimes at client sites. The role also involves ongoing research in IT security and supporting sales efforts.

Primary Duties include:

• Review security architecture and application designs, including source code reviews

• Perform mobile, application, infrastructure, and social engineering assessments and penetration testing

• Exploit vulnerabilities to access and expand access to remote systems

• Document technical issues identified during assessments

• Assist in building, hardening, and maintaining penetration testing systems

• Research emerging security topics and attack vectors

• Enhance Integrity360's security services and methodologies

• Internally communicate findings and innovations

• Represent Integrity360 at international events and forums

• Establish industry expertise

• Mentor team members

Desired Skills

• Solid experience in information security

• Experience in DevOps, Administration, or Engineering fields

• Experience as a penetration tester

• Development or source code review skills in languages like C/C++, C#, VB.NET, ASP, PHP, Java, Python, or Ruby

• Strong Unix, Windows, and network security skills

• Knowledge of application and network security concepts

• Excellent communication skills

• Manual penetration testing experience beyond automated tools

• Custom scripting or tool development for vulnerability scanning

• Networking knowledge including MPLS, BGP, OSPF, IPv6, TOR

• Understanding of development frameworks

• Knowledge of cloud hosting environments

• Familiarity with SIEM and defensive technologies

• Experience with security auditing tools

• Ethical hacking experience

• Intrusion prevention background

• Report writing and presentation skills

• Scripting, sys admin, or networking experience

• Understanding of programming methodologies

• Knowledge of quality and project management principles

• Advanced cloud architecture understanding

Certifications/Qualifications

• CHECK Team Leader or equivalent

• IT-related degree or certification

• Industry-leading qualifications such as OSCP, CREST, OSCE, or OSWP