7 дней назад
Senior Dynamic Offensive Testing Specialist (Cybersecurity)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Senior Dynamic Offensive Testing Specialist (Cybersecurity): Coordinate and execute dynamic offensive tests that translate emerging threats, vulnerabilities, attacker techniques, and campaigns into focused assessments across complex enterprise environments with an accent on threat-informed testing, operational safety, and rapid risk evaluation. Focus on adapting proofs of concept, building reusable testing capabilities, validating defensive controls, and communicating evidence-based findings to security and engineering teams.
Location: Madrid, Spain; hybrid work with agreed days at home and at MAD
Company
Hubs Spain is a technology and operations hub of that develops scalable, secure solutions support bank services across more than 38 countries.
What you will do
- Coordinate rapid assessments from threat intelligence signals through scop, approvals, execution, and report.
- Translate emerg vulnerabilities, attacker techniques, tool, and campaigns into focused offensive test scenarios.
- Execute safe, hands-on tests across on-premises, cloud, application, identity, endpoint, network, and hybrid environments.
- Develop reusable test procedures, scripts, tool, lab environments, and technical infrastructure.
- Work with security operations, incident response, vulnerability management, engineer, and control owners to validate finds and reduce risk.
- Conduct focused purple team activities and produce concise reports with evidence, limitations, impact, and recommended actions.
Requirements
- At least 5 years of hands-on experience in offensive security, penetration test, red team, security research, vulnerability assessment, or a comparable field.
- Experience translat threat intelligence, vulnerability information, and attacker techniques into technically sound offensive tests.
- Experience test enterprise identity systems, Active Directory, applications, endpoints, networks, and major cloud platforms includ Azure, AWS, or Google Cloud.
- Practical script and development skills with Python, PowerShell, C#, Go, or similar technologies.
- Strong understand of operational safety, rules of engagement, evidence handl, and risk management.
- Fluent English and availability for the Madrid-based hybrid work model are required.
Nice to have
- Experience with threat intelligence, vulnerability management, purple team, detection engineer, or incident response.
Culture & Benefits
- Flexible hybrid work model with shared decisions about office and home-work days.
- Health insurance for the employee and family, life insurance, and a pension plan available after one month.
- Restaurant card, transport allowance, and flexible remuneration options for nursery, transport, and train support.
- Access to office facilities includ electric mobility solutions, medical services, hairdresser, gym, and errands support.
- Collaborative, multicultural, agile, and international environment focused on inclusion, continuous learn, and secure technology.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →