Pentesting engineer

GMV; Tres Cantos; Híbrido; EUR 52.000 - 78.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Hybrid working model

Relocation package

Mobility opportunities

Descripción de la vacante

GMV is expanding its defense-focused team to conduct penetration testing across web, mobile, networks, Wi‑Fi, and cloud environments (AWS, Azure, GCP). You will participate in Red Team exercises and collaborate with defensive teams to strengthen threat detection and response.

We value scripting skills (Python, Bash, PowerShell) for automation and familiarity with PTES, MITRE ATT&CK and OWASP. Hybrid work mode and relocation options are available.

Formación

• Cybersecurity or similar graduates with experience in penetration testing: network infra, web/mobile apps, cloud (AWS, Azure, GCP), Active Directory, wireless networks.
• Experience in Red Team exercises including planning, executing simulated attacks, evasion, persistence and exploitation.
• Scripting skills for automation: Python, Bash, PowerShell.

Responsabilidades

• Perform penetration tests on web/mobile apps, networks, Wi‑Fi and cloud environments; assess AI model security.
• Participate in Red Team and Purple Team exercises to improve threat detection and response.
• Identify vulnerabilities and provide actionable mitigation recommendations.

Conocimientos

Penetration testing

Red Team exercises

Python

Bash

PowerShell

MITRE ATT&CK

OWASP

PTES

Cloud security

Active Directory

Educación

Cybersecurity or related degree

Descripción del empleo

Pentesting engineer | Job Details

If you dream of being a spy, but you don’t like Martinis .... Your place is with us!We are expanding our teams in the defense sector.Well get to the point; we'll tell you what's not on the web. If you want to know more about deGMV

WHAT CHALLENGE WILL YOU BE TAKING ON?

In our team you will participate in penetration testing projects and technical assessments on web and mobile applications, network infrastructures, Wi‑Fi networks, cloud environments (AWS, Azure, GCP), and emerging components such as artificial intelligence models. In addition, Red Team exercises will be conducted, oriented to simulate real attacks in a controlled manner, as well as Purple Team exercises, working in coordination with defensive teams to strengthen threat detection, response and mitigation.

Activities will include:

• Running penetration tests on web applications, mobile, network infrastructure, Wi‑Fi networks, cloud environments, artificial intelligence models, etc.
• Participate in Red Team exercises, simulating real attacks, and Purple Team exercises, collaborating with defensive teams to improve threat detection and response.
• Identify and report vulnerabilities, proposing technical recommendations for effective mitigation.
• Collaborate with IT and cybersecurity teams in the implementation of security best practices.

WHAT DO WE NEED IN OUR TEAM?

• cybersecurity or similar graduates with experience in penetration testing in: network infrastructure, web and mobile applications, cloud environments (AWS, Azure, GCP), Active Directory, wireless networks.
• In addition to experience in Red Team exercises, including planning, execution of simulated attacks, evasion techniques, persistence and exploitation in controlled or real environments.
• Scripting skills (Python, Bash, PowerShell) for automation of offensive tasks.
• Understanding of methodologies such as PTES, MITRE ATT&CK, OWASP will also be an asset.

WHAT DO WE OFFER?

• Hybrid working model and 8 weeks per year of teleworking outside your usual geographical area.
• Flexible start and finish times, and intensive working hours Fridays and in summer.
• Personalized career plan development, training and language learning support.
• National and international mobility.
• Do you come from another country? We can offer you a relocation package.
• Competitive compensation with ongoing reviews, flexible compensation and discount on brands.
• Wellbeing program: Health, dental and accident insurance; free fruit and coffee, physical, mental and financial health training, and much more!

In our recruitment processes you will always have telephone and personal contact, face-to-face or online, with our talent acquisition team. In addition, bank transfers and bank cards will never be requested. If you are contacted through another process, please get in touch with the person responsible for the selection process.

We promote equal opportunities in recruitment, and we are committed to inclusion and diversity.

WHAT ARE YOU WAITING FOR? JOIN US#LI-Hybrid

If you have any questions please do not hesitate to contact Clara Sanchez Lobato, in charge of this vacancy. Clara Sanchez Lobato