Pentest Service Owner

NextLink Group; Sant Cugat del Vallès; Remote; EUR 90,000 - 130,000; Full time

Job summary

NextLink Group is seeking an experienced Penetration Test Service Owner to lead an enterprise penetration testing service for a major pharmaceutical client. You will manage delivery, quality and alignment with business risks, while guiding offensive security initiatives and automation efforts.

The role combines technical security expertise with service ownership and vendor management. Remote position with Barcelona-friendly setup.

Qualifications

• Must have proven experience in penetration testing, offensive security or security assurance.
• Strong understanding of application, API, cloud, infrastructure, network and identity security.
• Experience coordinating external providers and complex security engagements.
• Ability to assess and challenge testing approaches, scopes and estimates.
• Strong stakeholder management, service management and communication skills.
• Ability to translate business risks into actionable testing priorities.
• Professional proficiency in English, proactive and autonomous.
• Hands-on experience in penetration testing, red team, security engineering or architecture.

Responsibilities

• Manage the penetration testing portfolio, including planning, risk-based prioritization and delivery coordination.
• Translate business risks and technical requirements into testing objectives and scopes.
• Coordinate stakeholders, external providers and technical teams.
• Review testing methodologies, scopes, estimates and tester profiles.
• Ensure service quality, performance monitoring and continuous improvement.
• Support automating testing approaches, ASM, AI-assisted testing and emerging offensive security tech.

Skills

Penetration testing

Offensive security

Security assurance

Stakeholder management

Communication

English proficiency

Testing methodologies

Job description

At NextLink, we are looking for an experienced Pentest Service Owner to join our team and collaborate on a cybersecurity project for one of our leading clients in the pharmaceutical industry.

You will be responsible for managing and coordinating an enterprise penetration testing service, ensuring effective delivery, quality, and alignment with business risks and security priorities.

The role combines technical security expertise, service ownership, and vendor management, while contributing to the continuous improvement of offensive security capabilities through automation and emerging technologies.

Main Tasks

• Manage the penetration testing portfolio, including planning, risk-based prioritization, and delivery coordination.
  
• Translate business risks and technical requirements into effective testing objectives and scopes.
  
• Coordinate stakeholders, external security providers, and technical teams.
  
• Review and challenge testing methodologies, scopes, estimates, limitations, and proposed tester profiles.
  
• Ensure service quality, performance monitoring, and continuous improvement.
  
• Support the adoption of automation, Attack Surface Management (ASM), AI-assisted testing, and emerging offensive security technologies.
  

Requirements

Mandatory

• Proven experience in penetration testing, offensive security, or technical security assurance.
  
• Strong understanding of application, API, cloud, infrastructure, network, and identity security.
  
• Experience coordinating external providers and complex security engagements.
  
• Ability to assess and challenge technical testing approaches, methodologies, scopes, and estimates.
  
• Strong stakeholder management, service management, and communication skills.
  
• Ability to translate business risks into actionable security testing priorities.
  
• Professional proficiency in English, with a proactive and autonomous approach.
  
• Hands-on experience in Penetration Testing, Red Teaming, Security Engineering, or Security Architecture.
  
• Familiarity with ASM, security automation, and AI-assisted penetration testing.
  
• Experience in enterprise cybersecurity services or regulated industries.
  

Location & Working Model

• Remote position. Barcelona-based candidates are preferred, but not mandatory. No regular office attendance required.