Penetration Tester (Cybersecurity)

Location: Madrid, Spain; hybrid work from home and the office

Base salary: EUR 42,000–70,000 per year for a full-time role, with potential performance-based rewards and benefits.

Company

hirify.global provides reinsurance, insurance, and insurance-based risk transfer solutions, helping manage risks including cybercrime, natural catastrophes, and climate change.

What you will do

• Execute penetration tests across web applications, APIs, networks, mobile applications, thick clients, and AI/LLM-based systems.
• Own, perform, and deliver security assessments while coordinating remediation with IT owners and stakeholders.
• Develop, maintain, and validate AI-driven agents and tools that automate recurring testing tasks, reduce false positives, and improve accuracy.
• Communicate service capabilities and test results to technical and business audiences.
• Deliver lessons-learned sessions and educational materials for developers and other stakeholders.
• Collaborate with global IT application owners, information security specialists, and chief information security officers.

Requirements

• At least 5 years of experience in information security and penetration testing.
• Good understanding of software development and architecture, programming, and scripting languages.
• Knowledge of ISO 27001/2, NIST, and OWASP Top 10 security frameworks and testing procedures.
• Experience with vulnerability management and penetration testing tools, including Burp Suite, nmap, Qualys, Bruno/Swagger, SQLMap, and Kali Linux.
• Experience with cloud security and testing cloud environments.
• Ability to communicate complex technical concepts clearly to business and technical audiences.
• Good communication and writing skills; English proficiency is required.
• Experience working in an international environment.

Nice to have

• Industry-relevant certifications such as SANS, CEH, Offensive Security, or eLearn Security.
• Knowledge of advanced persistent threats and modern attack techniques.
• Experience in agentic development and deploying or hosting AI tools using containers, servers, and APIs.
• Familiarity with MITRE ATT&CK, SAST/DAST, cloud testing, and reverse engineering.

Culture & Benefits

• Work in an inclusive and flexible environment that supports equal opportunities and fresh perspectives.
• Collaborate with more than 15,000 employees worldwide and global security teams.
• Potential performance-based bonus and additional benefits alongside the base salary.
• AI-powered tools may support application review, while hiring decisions are reviewed by people.
• Applicants returning to work after a career break are encouraged to apply.