Senior Offensive Security Engineer - Pen Testing & Red Team

GMV; Tres Cantos; Hybrid; EUR 70,000 - 90,000; Full time

Benefits offered by this job

Hybrid work model

8 weeks teleworking per year

Flexible start times

Relocation package

Job summary

GMV's Technical Audits team invites a senior pentester to join and design realistic attack scenarios based on MITRE ATT&CK TTPs, leading audit projects and helping organizations understand how they could be compromised before a real attacker acts.

You will work on web and mobile applications, network infrastructures, cloud environments (AWS, Azure, GCP), AD and AI-based systems, collaborating with Blue Team experts to improve threat detection and response capabilities.

Qualifications

• Minimum 3+ years of penetration testing across web, mobile, network, cloud, and AD.
• Experience leading Red Team operations and simulated attacks.
• Proficient in Python, Bash or PowerShell for automation.
• Ability to produce technical and executive risk reports.
• Strong communication and stakeholder management.

Responsibilities

• Execute and lead penetration tests in complex corporate environments.
• Participate in Red Team exercises and evasion against security controls.
• Identify vulnerabilities, assess impact and recommend mitigations.
• Develop or adapt offensive tools and automations using scripting languages.
• Produce clear technical and executive risk reports.
• Present findings to technical and business audiences.
• Manage cybersecurity audit projects and coordinate scope and timelines.

Skills

Penetration testing

Red Team operations

Threat reporting

Automation scripting

Effective communication

Project management

Education

OSCP

OSEP

OSWE

eCPPT

CRTP

Tools

Burp Suite

Nmap

Metasploit

C2 frameworks

Job description

GMV's Technical Audits team invites a senior pentester to join and design realistic attack scenarios based on MITRE ATT&CK TTPs, leading audit projects and helping organizations understand how they could be compromised before a real attacker acts.

You will work on web and mobile applications, network infrastructures, cloud environments (AWS, Azure, GCP), AD and AI-based systems, collaborating with Blue Team experts to improve threat detection and response capabilities.