Senior Penetration Tester | Madrid

UST España & Latam; Madrid; Híbrido; EUR 90.000 - 110.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Health insurance

Teleworking compensation

Training platforms access

Career stability and growth plans

Flexible payment schedule (12 or 14"+"

Descripción de la vacante

UST España & Latam is seeking a Senior Penetration Tester to join a strategic cybersecurity project in the wealth management sector. You will lead hands-on testing across applications, APIs, and cloud environments from our Madrid Security Compliance Centre in a hybrid setup.

The role requires 5+ years of hands-on experience, strong OWASP knowledge, and collaboration with security, development, and infrastructure teams to raise security standards. English is mandatory.

Formación

• +5 years hands-on experience in Penetration Testing, Ethical Hacking, or Application Security.
• Strong knowledge of OWASP Top 10, web app security, and exploitation techniques.
• Experience with security testing tools: Burp Suite, Nmap, OWASP ZAP, Metasploit.
• Familiarity with APIs, authentication mechanisms, HTTP/S, and modern web architectures.
• Strong analytical, troubleshooting, and communication skills.
• English proficiency; certifications such as OSCP, eWPT, CEH, GWAPT are a plus.

Responsabilidades

• Perform manual and automated penetration testing on web apps, APIs, and infrastructure.
• Identify, validate, and reproduce security vulnerabilities and attack scenarios.
• Assess the technical and business impact of security findings.
• Provide remediation recommendations and support security improvements.
• Apply OWASP-based methodologies and security best practices.
• Collaborate with security, development, and infrastructure teams to strengthen security posture.

Conocimientos

5+ years experience

OWASP Top 10

Penetration testing

Security assessments

English proficiency

Security certifications (OSCP/CEH etc)

Herramientas

Burp Suite

Nmap

OWASP ZAP

Metasploit

Descripción del empleo

We are looking for the very Top Talent…and we would be delighted if you were to join our team!

More in details, UST is a multinational company based in North America, certified as a Top Employer company with over 35.000 employees all over the world and presence in more than 30 countries. We are leaders on digital technology services, and we provide large-scale technologic solutions to big companies.

What are we looking for?

We are looking for a Senior Penetration Tester to join a strategic cybersecurity project with a global client in the wealth management sector.

As part of our Security Compliance Competence Centre (SCCC) in Madrid, you will play a key hands-on role in identifying, exploiting, and assessing security vulnerabilities across applications, APIs, infrastructure, and cloud environments.

You will work closely with security teams, developers, architects, and business stakeholders to strengthen the organization's security posture through proactive offensive security activities and expert security assessments.

Location: Hybrid. Madrid city center (Sol area). 3 days a week in the office.

Language: English is a must. Spanish desirable.

Key Responsibilities

• Perform manual and automated penetration testing on web applications, APIs, and infrastructure.
• Identify, validate, and reproduce security vulnerabilities and attack scenarios.
• Assess the technical and business impact of security findings.
• Provide remediation recommendations and support security improvements.
• Apply OWASP-based methodologies and industry security best practices.
• Collaborate with security, development, and infrastructure teams to strengthen the organization's security posture.

Required Qualifications

• +5 years of hands‑on experience in Penetration Testing, Ethical Hacking, or Application Security.
• Strong knowledge of OWASP Top 10, web application security, and exploitation techniques.
• Experience with tools such as Burp Suite, Nmap, OWASP ZAP, or Metasploit.
• Familiarity with APIs, authentication mechanisms, HTTP/S, and modern web architectures.
• Strong analytical, troubleshooting, and communication skills.
• Professional proficiency in English; certifications such as OSCP, eWPT, CEH, or GWAPT are a plus.

What can we offer?

• 23 days of Annual Leave plus the 24th and 31st of December as discretionary days!
• Numerous benefits (Health Care Plan, teleworking compensation, Life and Accident Insurances).
• Free access to several training platforms
• Professional stability and career plans
• UST also, compensates referrals from which you could benefit when you refer professionals.
• The option to pick between 12 or 14 payments along the year.
• Real Work Life Balance measures (flexibility, WFH or remote work policy, compacted hours during summertime…)
• UST Club Platform discounts and gym Access discounts

In UST we are committed to equal opportunities in our selection processes and do not discriminate based on race, gender, disability, age, religion, sexual orientation or nationality. We have a special commitment to Disability & Inclusion, so we are interested in hiring people with disability certificate.