Pentest Service Owner | Pharma (Remote)

Ambit Iberia; Évora; Remote; EUR 65,000 - 90,000; Full time

Job summary

Ambit Iberia is seeking a Pentest Service Owner to lead and evolve an enterprise-wide penetration testing program across applications, cloud, infrastructure, networks, APIs and identity platforms. You will bridge business risk with security assurance and service delivery.

You will own the pentesting portfolio, coordinate internal and external providers, prioritize engagements by risk, and drive automation, ASM and AI-assisted testing to improve offensive security.

Qualifications

• Strong understanding of application, API, cloud, infrastructure, network and identity security.
• Ability to translate business risks into testing objectives.
• Strong stakeholder management and communication skills.
• Experience managing services or engagements with multiple stakeholders.
• Ability to challenge testing scopes and delivery approaches.
• Strong analytical and decision-making capabilities.
• Professional proficiency in English.

Responsibilities

• Own and manage the enterprise penetration testing service and portfolio.
• Drive risk-based prioritization of pentesting engagements across business and technology domains.
• Coordinate internal stakeholders, security teams, and external testing providers to ensure successful delivery of assessments.
• Define, review, and challenge testing scopes, methodologies, estimates, assumptions, and engagement objectives.
• Ensure the appropriate testing capabilities and expertise are assigned to each assessment.
• Translate business risks and technical requirements into meaningful pentesting objectives.
• Oversee service quality, delivery performance, reporting standards, and continuous improvement initiatives.
• Review testing outcomes and support stakeholders in understanding risks, findings, and remediation priorities.
• Collaborate with cybersecurity teams to enhance offensive security strategies and testing frameworks.
• Drive innovation within the service, including automation, attack surface management, AI-supported testing, and emerging offensive security capabilities.
• Monitor service effectiveness through metrics, stakeholder feedback, and operational KPIs.

Skills

App Security

API Security

Cloud Security

Infra Security

Network Security

Identity Security

Stakeholder mgmt

English proficiency

Service management

Job description

We are looking for a Pentest Service Owner to lead and evolve an enterprise-wide penetration testing service, ensuring effective security assurance across applications, cloud environments, infrastructure, networks, APIs, and identity platforms. In this role, you will act as the bridge between business risk, technical security assurance, and service delivery. You will own the pentesting portfolio, coordinate stakeholders and external providers, prioritize assessments based on risk, and ensure the right testing capabilities are assigned to each engagement. You will also contribute to the evolution of offensive security practices through automation, attack surface management, AI-supported testing, and emerging security technologies.

Tasks & Responsibilities

• Own and manage the enterprise penetration testing service and portfolio.
• Drive risk-based prioritization of pentesting engagements across business and technology domains.
• Coordinate internal stakeholders, security teams, and external testing providers to ensure successful delivery of assessments.
• Define, review, and challenge testing scopes, methodologies, estimates, assumptions, and engagement objectives.
• Ensure the appropriate testing capabilities and expertise are assigned to each assessment.
• Translate business risks and technical requirements into meaningful penetration testing objectives.
• Oversee service quality, delivery performance, reporting standards, and continuous improvement initiatives.
• Review testing outcomes and support stakeholders in understanding risks, findings, and remediation priorities.
• Collaborate with cybersecurity teams to enhance offensive security strategies and testing frameworks.
• Drive innovation within the service, including automation, attack surface management, AI-supported testing, and emerging offensive security capabilities.
• Monitor service effectiveness through metrics, stakeholder feedback, and operational KPIs.

Skills

Must Have

• Strong understanding of Application Security, API Security, Cloud Security, Infrastructure Security, Network Security, and Identity Security.
• Ability to translate business risks and technical contexts into practical and effective testing objectives.
• Strong stakeholder management and communication skills.
• Experience managing services, projects, or security-related engagements involving multiple stakeholders.
• Ability to challenge testing scopes, methodologies, effort estimations, limitations, and proposed delivery approaches.
• Strong analytical and decision-making capabilities.
• Professional proficiency in English.

Nice to have

• Experience in Penetration Testing, Offensive Security, Red Teaming, or Technical Security Assurance.
• Experience coordinating external security vendors and complex security engagements.
• Previous hands-on experience in Penetration Testing, Security Engineering, Security Architecture, or Red Team operations.
• Familiarity with Attack Surface Management (ASM) solutions and security automation initiatives.
• Exposure to AI-assisted security testing and emerging offensive security technologies.
• Experience working within large enterprise environments.