Senior Penetration Tester | Hybrid, Cloud & Red Team Lead

EY; Málaga; Hybrid; EUR 55,000 - 75,000; Full time

Benefits offered by this job

Hybrid work model

Career development programs

Well-being programs

Volunteering opportunities

Recognition programs

Job summary

EY GDS Spain in Malaga is seeking a Senior Penetration Tester / Red Team Consultant to deliver offensive security services across applications, infrastructure and cloud environments. You will translate findings into actionable risk reductions and work within a hybrid model from EY GDS Spain.

You'll join a team responsible for structured tests, threat-led simulations where applicable, and high-quality reporting to leadership. English proficiency and OSCP/GPEN/PNPT-like certifications are valued.

Qualifications

• 3 - 4 years of hands-on experience in penetration testing and/or red teaming.
• Solid knowledge of testing methodologies (e.g., OWASP for web/API testing).
• Hands-on experience with offensive security tooling (Burp Suite, Nmap, scripting).
• Strong understanding of Windows/Linux and networking fundamentals; troubleshooting and evidence capture.
• English at least B2 - C1 (written and spoken) is required.

Responsibilities

• Plan and execute penetration tests (internal/external), including web apps/APIs, network/infrastructure, and cloud environments
• Define scope, rules of engagement, and test strategy with stakeholders; ensure safe execution and minimal impact
• Perform security testing using a balanced approach of manual techniques and validated tooling; document evidence and reproduce findings
• Deliver high-quality reporting (executive summary, technical details, risk rating, remediation guidance); support retesting
• Conduct red team / purple team exercises where applicable, aligning scenarios to business risks and adversary techniques
• Collaborate with defensive teams (SOC/Blue Team/IR) while ensuring independence of offensive and defensive activities
• Contribute to continuous improvement: refine methodologies and knowledge sharing

Skills

Attack paths

Security weaknesses

Documentation

Communication

Tools

Burp Suite

Nmap

Scripting

Job description

EY GDS Spain in Malaga is seeking a Senior Penetration Tester / Red Team Consultant to deliver offensive security services across applications, infrastructure and cloud environments. You will translate findings into actionable risk reductions and work within a hybrid model from EY GDS Spain.

You'll join a team responsible for structured tests, threat-led simulations where applicable, and high-quality reporting to leadership. English proficiency and OSCP/GPEN/PNPT-like certifications are valued.