Pentesting engineer

GMV Spain; Tres Cantos; Híbrido; EUR 45.000 - 65.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Hybrid working

Relocation package

Wellbeing program

Career development

Language training

Descripción de la vacante

GMV is expanding its cybersecurity team in Madrid. The role focuses on hands-on penetration testing of web and mobile applications, network infrastructures, Wi‑Fi networks, and cloud environments (AWS, Azure, GCP).

You will participate in Red Team exercises and collaborate with defensive teams to strengthen threat detection and response. You should have a background in cybersecurity with proven pentest experience across networks, web/mobile apps and cloud, plus scripting skills (Python, Bash,

Formación

• Cybersecurity or related degree with hands-on pentesting experience across networks, web and mobile apps, and cloud environments (AWS, Azure, GCP).
• Experience planning and executing Red Team exercises; evasion techniques and controlled exploits.
• Scripting ability (Python, Bash, PowerShell) to automate offensive tasks; familiarity with PTES/MITRE ATT&CK/OWASP is a plus.

Responsabilidades

• Run penetration tests on web and mobile applications, network infrastructure and cloud environments.
• Participate in Red Team exercises and Purple Team collaborations with defense teams.
• Identify, document and report vulnerabilities with practical mitigations.

Conocimientos

Penetration testing

Red Team

Purple Team

Cloud security

Active Directory

AI/ML security awareness

Educación

Cybersecurity degree

Herramientas

Python

Bash

PowerShell

Descripción del empleo

If you dream of being a spy, but you don’t like Martinis .... Your place is with us!

We are expanding our teams in the tech sector.

We´ll get to the point; we'll tell you what's not on the web.If you want to know more about de GMV

WHAT CHALLENGE WILL YOU BE TAKING ON?

In our team you will participate in penetration testing projects and technical assessments on web and mobile applications, network infrastructures, Wi-Fi networks, cloud environments (AWS, Azure, GCP), and emerging components such as artificial intelligence models. In addition, Red Team exercises will be conducted, oriented to simulate real attacks in a controlled manner, as well as Purple Team exercises, working in coordination with defensive teams to strengthen threat detection, response and mitigation.
Activities will include:

• Running penetration tests on web applications, mobile, network infrastructure, Wi-Fi networks, cloud environments, artificial intelligence models, etc.
• Participate in Red Team exercises, simulating real attacks, and Purple Team exercises, collaborating with defensive teams to improve threat detection and response.
• Identify and report vulnerabilities, proposing technical recommendations for effective mitigation.
• Collaborate with IT and cybersecurity teams in the implementation of security best practices

WHAT DO WE NEED IN OUR TEAM?

For this position, we are looking for cybersecurity or similar graduates with experience in penetration testing in: network infrastructure, web and mobile applications, cloud environments (AWS, Azure, GCP), Active Directory, wireless networks. In addition to experience in Red Team exercises, including planning, execution of simulated attacks, evasion techniques, persistence and exploitation in controlled or real environments.
Scripting skills (Python, Bash, PowerShell) for automation of offensive tasks
Understanding of methodologies such as PTES, MITRE ATT&CK, OWASP will also be an asset.

WHAT DO WE OFFER?

Hybridworking model and 8 weeks per year of teleworking outside your usual geographical area.

Flexible start and finish times, and intensive working hours Fridays and insummer.

Personalizedcareer plan development, training and language learning support.

National and international mobility. Do you come from another country?We can offer you a relocation package.

Competitivecompensation with ongoing reviews, flexible compensation anddiscount on brands.

Wellbeingprogram: Health, dental and accident insurance; free fruit and coffee, physical,mental and financial health training, and much more!

In our recruitment processes youwill always have telephone and personal contact, face-to-face or online, withour talent acquisition team. In addition, bank transfers and bank cards will neverbe requested. If you are contacted through another process, please get in touch with the person responsible for the selection process.

We promote equal opportunities inrecruitment, and we are committed to inclusion and diversity.