Penetration Tester (Hybrid)

About the role

Swiss Re is looking for an experienced Penetration Tester in Madrid, within its Group Security & Technology Platforms (GSTP) division. The Penetration Testing team simulates real-world cyberattacks on computer systems, networks, applications, services and platforms, detecting and fixing security weaknesses before they can be exploited. The role works in a hybrid setup, balancing work from home and the office.

Key responsibilities

• Execute penetration tests across web applications, APIs, networks, mobile, thick clients and AI/LLM-based systems
• Own, perform and deliver security assessments, coordinating remediations
• Develop, maintain and validate AI-driven agents and tools to automate recurring testing tasks and reduce false positives
• Communicate service capabilities and test results to IT owners and stakeholders
• Compile lessons-learnt sessions and educational material for IT developers
• Work closely with global teams of application owners, information security specialists and CISOs

Required profile

• At least 5 years of experience in information security and penetration testing
• Good understanding of software development and architecture
• Sound understanding of security frameworks (ISO27001/2, NIST, OWASP Top 10)
• Experience with vulnerability management and penetration testing tools
• Experience with cloud security and testing cloud environments
• Ability to explain complex technical concepts to business and technical audiences, with good communication and writing skills
• Proficiency in English required; other languages a plus
• Experience in an international environment

Required skills

• Programming and scripting languages
• Burp Suite, nmap, Qualys, Bruno/Swagger, SQLMap, Kali Linux
• Nice to have: SANS, CEH, Offensive Security or eLearn Security certifications; knowledge of MITRE ATT&CK, SAST/DAST, reverse engineering and AI tool deployment

The base salary range for Spain is EUR 42,000 to EUR 70,000 for a full-time role, depending on profile and experience; a performance-based bonus may also apply.