search Browse Jobs
Pentesting cibersecurity engineerGMV · Tres Cantos, Community of Madrid, Madrid, ES, Spain
GMV logo

GMV

company page ↗

Pentesting cibersecurity engineer

🗓️ Posted 2026-09-28 Tres Cantos, Community of Madrid, Madrid, ES, Spain Full-time Hybrid ICT
💰 Salary Not shared 📊 Market 2,800 EUR–4,200 EUR/mo

About the Company

Pentesting cibersecurity engineer If you wanted to be Anonymous, but the pandemic taught you that wearing a mask is not your cup of tea Your place is with us Do you want to participate in advanced offensive security assessments The GMV Technical Audits team is looking for you We ll get to the point; we'll tell you what's not on the web. If you want to know more about de GMV (https://gmv.com/es-es/sobre-gmv) WHAT CHALLENGE WILL YOU BE TAKING ON As a Senior Pentester, you will not only execute technical assessments but also design realistic attack scenarios based on MITRE ATT&CK TTPs and lead audit projects, helping organizations understand how they could be compromised before a real attacker does.

Responsibilities

  • ● etworks, cloud environments (AWS, Azure, GCP), Active Directory and AI-based systems.
  • ● You will also participate in Red Team and Purple Team exercises, simulating real attacks and collaborating with Blue Team professionals to improve threat detection and response capabilities.
  • ● In your day-to-day work you will:
  • ● Execute and lead penetration tests in complex corporate environments.
  • ● Participate in Red Team exercises, applying evasion techniques against EDR, XDR, WAF and antivirus solutions.
  • ● Identify vulnerabilities, analyze their impact and propose effective mitigation strategies.
  • ● Develop or adapt offensive tools and automations using Python, Bash or PowerShell.
  • ● Produce clear technical and executive reports focused on risk.
  • ● Present findings to both technical and business audiences.
  • ● Manage technical audit projects, coordinating scope, timelines and deliverables.
  • ● WHAT DO WE NEED IN OUR TEAM
  • ● For this position, it is important to have:
  • ● 3+ years of experience in penetration testing (web, mobile, network, cloud, Active Directory, Wi-Fi).
  • ● Experience in Red Team operations designing and executing simulated attacks.
  • ● Advanced knowledge of tools such as Burp Suite, Nmap, Metasploit or C2 frameworks.
  • ● Ability to automate offensive tasks through scripting (Python, Bash or PowerShell).
  • ● Experience producing technical and executive reports focused on risk.
  • ● Strong communication skills and ability to present results clearly.
  • ● Experience managing cybersecurity or technical audit projects.