Senior Pentester, hibrido

Senior Pentester We are looking for the very Top Talent and we would be delighted if you were to join our team! More in details, UST is a multinational company based in North America, certified as a Top Employer company with over 35,000 employees all over the world and presence in more than 30 countries. We are leaders on digital technology services, and we provide large-scale technologic solutions to big companies. What are we looking for? We re looking for a Senior Penetration Tester. You will join a strategic project with a global client in the wealth management sector. As an Exposure Management Technical Expert within our Security Compliance Competence Centre (SCCC) in Madrid, you will play a key hands-on role in strengthening our proactive security testing program. Acting as an internal penetration testing specialist, you will: - Validate external security findings - Ensure technical quality and reproducibility of deliverables - Support the scoping and execution of penetration testing engagements You will collaborate closely with Exposure Managers, application and technology teams, and external vendors to ensure consistent and high-quality testing practices across the organization. Key Responsibilities Penetration Testing Validation - Reproduce and validate vulnerabilities and their remediation using tools such as Burp Suite and Nmap - Apply manual and automated techniques across web applications, APIs, and infrastructure Technical Quality Assurance - Review penetration testing reports to ensure: - Accuracy - Completeness - Clarity - Reproducibility of findings Scoping Advisory - Support risk-based scoping of penetration testing engagements - Act as a technical advisor on: - Security testing methodologies - Findings interpretation - Remediation strategies Security Standards Best Practices - Ensure alignment with: - OWASP Testing Guide - OWASP Top 10 - Internal security standards False Positive Risk Management - Analyze reported vulnerabilities and identify false positives - Ensure correct classification and prioritization Remediation Hardening - Provide technical guidance to development and infrastructure teams - Collaborate with architects on secure and resilient baseline configurations Collaboration Knowledge Sharing - Work closely with Exposure Managers and global technical teams - Share insights, patterns, and lessons learned to improve internal practices - Support consistent execution across all penetration testing activities Your Profile Required Qualifications - Bachelor s degree in Computer Science, Information Security, or equivalent experience - 3 5 years of hands-on experience in: - Penetration testing - Application security - Vulnerability assessment - Strong experience with web application security testing tools (e.g., Burp Suite) - Solid understanding of: - OWASP Top 10 vulnerabilities - Exploitation techniques - Ability to: - Read, understand, and reproduce penetration testing findings - Communicate technical topics to non-technical stakeholders - Knowledge of: - HTTP/S protocols - Authentication mechanisms - Modern web architectures (APIs, microservices) - Strong analytical and problem-solving skills - Professional proficiency in English and Spanish - Eligibility to work in Spain Nice to Have - Certifications such as: - OSCP, eWPT, CEH, GWAPT, Burp Suite Certified Practitioner - Experience: - Reviewing third-party security reports - Working with external testing vendors - Infrastructure/network penetration testing - Secure code review or secure development practices - Programming/scripting skills (e.g., Python, JavaScript) - Experience in financial services or regulated environments - Familiarity with DevSecOps or CI/CD security integration - German language skills Location: Hybrid. Madrid city center (Sol area). 3 da