Senior Penetration Tester | Red Team & Cloud Focus

Ey Studionederland; Málaga; Híbrido; EUR 60.000 - 100.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Flexible Work-Life Integration

Well-Being Programs

Career Development

Descripción de la vacante

EY GDS Spain in Malaga invites a Senior Penetration Tester / Red Team Consultant to join our offensive security practice. The role covers structured penetration tests across apps, infra, and cloud, with opportunities for threat-led simulations and collaboration with SOC/IR teams.

You’ll work in a hybrid setup from EY GDS Spain, with ongoing development and exposure to cutting-edge security testing techniques and real-world client engagements.

Formación

• 3–4 years of hands-on penetration testing and/or red teaming with professional reports.
• Solid knowledge of testing methodologies (OWASP for web/API testing).
• Hands-on experience with common offensive security tooling and scripting.

Responsabilidades

• Plan and execute penetration tests (internal/external), including web apps/APIs, network/infrastructure, and cloud environments.
• Define scope, rules of engagement, and test strategy with stakeholders; ensure safe execution and minimal impact.
• Perform security testing with manual techniques and tooling; document evidence and reproduce findings.
• Deliver high-quality reporting with executive summaries, risk ratings, and remediation guidance.
• Conduct red team/purple team exercises where applicable, aligned to business risks.
• Collaborate with defensive teams while ensuring independence of offensive activities and knowledge sharing.

Conocimientos

Penetration testing

Red team

Threat-led testing

Report writing

Automation scripting

Educación

Herramientas

Burp Suite

Nmap

Descripción del empleo

EY GDS Spain in Malaga invites a Senior Penetration Tester / Red Team Consultant to join our offensive security practice. The role covers structured penetration tests across apps, infra, and cloud, with opportunities for threat-led simulations and collaboration with SOC/IR teams.

You’ll work in a hybrid setup from EY GDS Spain, with ongoing development and exposure to cutting-edge security testing techniques and real-world client engagements.