Senior Web App Security Consultant - Remote

Google; España; Presencial; EUR 88.000 - 90.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Bonus target 15%

Equity

Benefits

Descripción de la vacante

Google is seeking a true web application hacking specialist to scope, plan, and execute highly sophisticated offensive security assessments for Google Cloud and Mandiant customers.

The role focuses on advanced web application and API exploitation, red team initial access vectors, and bespoke security assessments; occasional infrastructure assessments and bespoke projects are included. Strong reporting and leadership are required.

Formación

• Bachelor's degree or equivalent practical experience in Computer Science, Cybersecurity, or a related field.
• 5 years of experience in offensive security, specifically focused on manual web application pen testing and API testing.
• Experience with operating system security across Linux, Windows, and macOS.
• Experience delivering reports to both technical and executive audiences (e.g., explaining exploit chains or technical risks).
• Preferred certifications: OSWE, GWAPT, OSCP, eWPTX, or CCT APP.
• Cloud security experience including GCP.
• Proficiency in Python, JavaScript, or Go for custom tool creation.
• Understanding of OWASP Top 10 and modern JS/SPA frameworks, GraphQL, REST APIs, and microservices.
• Understanding of network protocols, system administration, and incident response.
• Proven track record of manually discovering and exploiting critical vulnerabilities.

Responsabilidades

• Participate in external phases of Red Team engagements, leveraging web app compromise to establish footholds.
• Conduct in-depth, manual pen testing of web applications, APIs, microservices, and mobile backends; include network/infrastructure pen testing in broader assessments.
• Dedicate time to security research, finding new exploitation techniques and developing custom tools.
• Author highly technical reports detailing exploitation steps, PoCs, and remediation for developers and executives.
• Act as a technical lead, scoping projects, guiding delivery, and mentoring junior consultants.

Conocimientos

Offensive security

Manual web app pen testing

API testing

Executive reporting

Cross-platform (Linux/Windows/macOS)

Security research

Python

JavaScript

Go

Educación

Bachelor's degree or equivalent in CS/Cybersecurity

Herramientas

Python

JavaScript

Go

Descripción del empleo

Google is seeking a true web application hacking specialist to scope, plan, and execute highly sophisticated offensive security assessments for Google Cloud and Mandiant customers.

The role focuses on advanced web application and API exploitation, red team initial access vectors, and bespoke security assessments; occasional infrastructure assessments and bespoke projects are included. Strong reporting and leadership are required.