Senior Pentester - Tres Cantos

Gmv; Madrid; Híbrido; EUR 70.000 - 95.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Remote work up to 8 weeks/year

Relocation package

Training opportunities

Descripción de la vacante

Gmv is seeking a Senior Pentester to lead offensive security assessments across web, mobile, network, cloud, and AI systems. You will design realistic attack scenarios using MITRE ATT&CK, guide audit projects for organizations to understand vulnerabilities before attackers exploit them.

The role includes Red Team and Purple Team activities, collaboration with cross-functional teams, and shaping security practices at scale.

Formación

• 5+ years in penetration testing across web, mobile, network, cloud, AD, Wi-Fi
• Experience in Red Team operations
• Strong communication and reporting skills
• Independent leadership and cross-functional collaboration
• Automation of offensive tasks via scripting (Python, Bash, PowerShell)

Responsabilidades

• Lead penetration tests in complex corporate environments
• Participate in Red Team exercises and apply evasion against EDR, XDR, WAF, and AVs
• Develop or adapt offensive tools and automations (Python, Bash, PowerShell)
• Produce technical and executive risk-focused reports
• Present findings to technical and business audiences
• Manage audit projects, including scope, timelines and deliverables

Descripción del empleo

As a Senior Pentester, you will lead offensive security assessments and design realistic attack scenarios using MITRE ATT&CK, guiding audit projects for organizations aiming to understand vulnerabilities before real attackers exploit them. You will work across web, mobile, network, cloud, AD, and AI-based systems, and participate in Red Team and Purple Team exercises to boost detection and response. You will translate findings into practical mitigation and contribute to risk-focused reports for technical and business audiences. This role offers collaboration with cross-functional teams and a chance to shape security practices at scale.

• remote work up to 8 weeks/year
• relocation package
• training opportunities
• Lead penetration tests in complex corporate environments
• Participate in Red Team exercises and apply evasion against EDR, XDR, WAF, and AVs
• Identify vulnerabilities, assess impact and propose mitigations
• Develop or adapt offensive tools and automations (Python, Bash, PowerShell)
• Produce technical and executive risk-focused reports
• Present findings to technical and business audiences
• Manage audit projects, including scope, timelines and deliverables
• 5+ years in penetration testing (web, mobile, network, cloud, AD, Wi-Fi)
• Experience in Red Team operations
• Advanced knowledge of Burp Suite, Nmap, Metasploit or C2 frameworks
• Automation of offensive tasks via scripting (Python, Bash, PowerShell)
• Experience producing technical and executive risk reports
• Strong communication and clear presentation of results
• Experience managing cybersecurity or technical audit projects
• Offensive certifications (OSCP, OSEP, OSWE, eCPPT, CRTP or equivalent)
• Knowledge of PTES, MITRE ATT&CK, OWASP
• Experience assessing security in AI/LLM-based systems (OWASP Top 10 for LLMs)
• Strong communication
• Independent leadership
• Cross-functional collaboration
• Burp Suite
• Nmap