Pentesting Engineer

Gmv; Guadalajara; Híbrido; EUR 42.000 - 64.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Hybrid working model

Teleworking 8 weeks/year

Relocation package

Wellbeing program

Descripción de la vacante

GMV está buscando un ingeniero de pentesting para unirse a su equipo de defensa y seguridad. Realizará pruebas de penetración en aplicaciones web, móviles e infraestructuras, y participará en ejercicios de Red Team para simular ataques reales.

Se valorará experiencia con entornos en la nube (AWS, Azure, GCP), redes inalámbricas y Active Directory. Modelo de trabajo híbrido y movilidad nacional e internacional disponibles.

Formación

• Titulación en ciberseguridad o similar, con experiencia en pruebas de penetración.
• Conocimientos de pruebas en infraestructuras de red, web y móvil, y entornos en la nube.
• Conocimiento de metodologías PTES, MITRE ATT&CK y OWASP es valorable.

Responsabilidades

• Realizar pruebas de penetración en aplicaciones web, móviles e infraestructuras.
• Participar en ejercicios de Red Team y Purple Team para simular ataques controlados.
• Identificar vulnerabilidades y proponer recomendaciones técnicas a equipos de IT y ciberseguridad.

Conocimientos

Penetration testing

Red Team

Python

Bash

PowerShell

Educación

Cybersecurity or related degree

Herramientas

AWS

Azure

GCP

Active Directory

Descripción del empleo

Pentesting engineer GMV viñuelas, castilla la mancha, Spain

Descripción del trabajo

Pentesting engineer | Job DetailsIf you dream of being a spy, but you don't like Martinis .... Your place is with us!We are expanding our teams in the defense sector.Well get to the point; we'll tell you what's not on the web. If you want to know more about de GMVWHAT CHALLENGE WILL YOU BE TAKING ON?

In our team you will participate in penetration testing projects and technical assessments on web and mobile applications, network infrastructures, Wi-Fi networks, cloud environments (AWS, Azure, GCP), and emerging components such as artificial intelligence models. In addition, Red Team exercises will be conducted, oriented to simulate real attacks in a controlled manner, as well as Purple Team exercises, working in coordination with defensive teams to strengthen threat detection, response and will include:

• Running penetration tests on web applications, mobile, network infrastructure, Wi-Fi networks, cloud environments, artificial intelligence models, etc.
• Participate in Red Team exercises, simulating real attacks, and Purple Team exercises, collaborating with defensive teams to improve threat detection and response.
• Identify and report vulnerabilities, proposing technical recommendations for effective with IT and cybersecurity teams in the implementation of security best practices.

WHAT DO WE NEED IN OUR TEAM?

• cybersecurity or similar graduates with experience in penetration testing in network infrastructure, web and mobile applications, cloud environments (AWS, Azure, GCP), Active Directory, wireless networks.
• experience in Red Team exercises, including planning, execution of simulated attacks, evasion techniques, persistence and exploitation in controlled or real environments.
• Scripting skills (Python, Bash, PowerShell) for automation of offensive tasks.
• Understanding of methodologies such as PTES, MITRE ATT&CK, OWASP will also be an asset.

WHAT DO WE OFFER?

• Hybrid working model and 8 weeks per year of teleworking outside your usual geographical area. Flexible start and finish times, and intensive working hours Fridays and in summer.
• Personalized career plan development, training and language learning support.
• National and international mobility.
• Relocation package for those from another country.
• Competitive compensation with ongoing reviews, flexible compensation and discount on brands.
• Wellbeing program: Health, dental and accident insurance; free fruit and coffee, physical, mental and financial health training, and much more!

In our recruitment processes you will always have telephone and personal contact, face-to-face or online, with our talent acquisition team. In addition, bank transfers and bank cards will never be requested. If you are contacted through another process, please get in touch with the person responsible for the selection process.

We promote equal opportunities in recruitment, and we are committed to inclusion and diversity.

If you have any questions please do not hesitate to contact Clara Sanchez Lobato, in charge of this vacancy. Clara Sanchez Lobato