Senior Penetration Tester & Red Team Lead - Hybrid

GMV; Tres Cantos; Ibrido; EUR 70.000 - 90.000; Tempo pieno

Vantaggi offerti da questo lavoro

Hybrid work model

Relocation package

Flexible start and finish times

Career plan development & language学习

Descrizione del lavoro

GMV is seeking a Senior Pentester to lead complex security assessments across web, mobile, network, cloud, and AI systems, including Red Team exercises. You will design realistic attack scenarios aligned with MITRE ATT&CK, develop offensive tooling, and deliver risk-focused reports to technical and business audiences.

The role emphasizes independent project leadership, collaboration with Blue Team, and a hybrid work model with international mobility options.

Competenze

• 5+ years of experience in penetration testing (web, mobile, network, cloud, Active Directory, Wi‑Fi).
• Experience in Red Team operations designing and executing simulated attacks.
• Advanced knowledge of tools such as Burp Suite, Nmap, Metasploit or C2 frameworks.
• Ability to automate offensive tasks through scripting (Python, Bash or PowerShell).
• Experience producing technical and executive reports focused on risk.
• Strong communication skills and ability to present results clearly.
• Experience managing cybersecurity or technical audit projects.
• Offensive certifications such as OSCP, OSEP, OSWE, eCPPT, CRTP or equivalent.
• Knowledge of frameworks and methodologies such as PTES, MITRE ATT&CK or OWASP.
• Experience assessing security in AI or LLM-based systems (OWASP Top 10 for LLMs).

Mansioni

• Execute and lead penetration tests in complex corporate environments.
• Participate in Red Team exercises, applying evasion techniques against EDR, XDR, WAF and antivirus solutions.
• Identify vulnerabilities, analyze their impact and propose effective mitigation strategies.
• Develop or adapt offensive tools and automations using Python, Bash or PowerShell.
• Produce clear technical and executive reports focused on risk.
• Present findings to both technical and business audiences.
• Manage technical audit projects, coordinating scope, timelines and deliverables.

Conoscenze

Penetration testing

Red Team operations

Automation scripting

Technical reporting

Clear communication

Strumenti

Burp Suite

Nmap

Metasploit

C2 frameworks

Descrizione del lavoro

GMV is seeking a Senior Pentester to lead complex security assessments across web, mobile, network, cloud, and AI systems, including Red Team exercises. You will design realistic attack scenarios aligned with MITRE ATT&CK, develop offensive tooling, and deliver risk-focused reports to technical and business audiences.

The role emphasizes independent project leadership, collaboration with Blue Team, and a hybrid work model with international mobility options.