Penetration Tester

CyberProof is a cyber security services and platform company whose mission is to help our customers react faster and smarter – and stay ahead of security threats, by creating secure digital ecosystems. CyberProof automates processes to detect and prioritize threats early and respond rapidly and decisively.

CyberProof is part of the UST Global family. Some of the world’s largest enterprises trust us to create and maintain secure digital ecosystems using our comprehensive cyber security platform and mitigation services.

We're on the hunt for a skilled Penetration Tester with a passion for Web Application Security. In this exciting role, you'll play a pivotal part in uncovering and addressing security vulnerabilities across networks, systems, and applications. You'll conduct in-depth vulnerability assessments, simulate real-world cyberattacks, and collaborate closely with senior security experts to fortify an organization's digital landscape. If you're ready to turn your expertise into a powerful shield against cyber threats, we'd love to hear from you!

Your main tasks and accountabilities will be :

Perform vulnerability scans and basic penetration testing on networks, web applications, mobile applications, and other systems. Identify common vulnerabilities (e.g., OWASP Top 10) and misconfigurations in IT infrastructure. Participate in penetration testing exercises under the guidance of senior pentesters. Utilize automated tools and manual techniques to exploit potential vulnerabilities. Document identified vulnerabilities, potential impacts, and recommended mitigation strategies. Help prepare detailed reports for senior team members and stakeholders, including technical staff and management. Update and manage penetration testing tools and software. Assist in setting up and maintaining test environments. Keep up to date with the latest security threats, tools, and techniques. Participate in training sessions, certifications, and knowledge-sharing activities.

What do we expect from you?

Familiarity with basic networking concepts, operating systems (Windows, Linux), and programming / scripting languages (Python, Bash, etc.). Strong Knowledge of web applications vulnerabilities Understanding of common vulnerabilities and security testing methodologies. Exposure to penetration testing tools (e.g., Nmap, Burp Suite, Metasploit, Wireshark). Analytical thinking and problem-solving skills. Strong written and verbal communication skills for reporting findings. Eagerness to learn and adapt to new cybersecurity challenges. Fluent in Spanish and English Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related field (or equivalent experience). Certifications (nice to have) : GWAPT, OSCP, OSWE, BSCP, CBBH, CWEE is a plus.

What do we offer?

23 days of Annual Leave plus the 24th and 31st of December as discretionary days. Remote work within Spain. Preferred location Barcelona as part of the team is in Barcelona and so you could benefit from different team building activities that we do in the team. Numerous benefits (Heath Care Plan, teleworking compensation, Life and Accident Insurances). `Retribución Flexible´ Program : (Meals, Kinder Garden, Transport, online English lessons, Heath Care Plan…) Free access to several training platforms Professional stability and career plans Referral program The option to pick between 12 or 14 payments along the year. Real Work Life Balance measures (flexibility, WFH or remote work policy, compacted hours during summertime…)