Senior Penetration Tester / Red Team Consultant

About the role

EY GDS Spain is looking for a Senior Penetration Tester / Red Team Consultant to join its Cyber Security team in Malaga. The role delivers offensive security services that help clients validate and improve their security posture, executing structured penetration tests and threat-led adversary simulations across applications, infrastructure and cloud/hybrid environments. The position is hybrid.

Key responsibilities

• Plan and execute internal and external penetration tests of web applications/APIs, networks and cloud environments
• Define scope, rules of engagement and test strategy with stakeholders, keeping operations safe and minimally impacted
• Perform security testing with a mix of manual techniques and validated tools, documenting evidence and reproducing findings
• Deliver quality reports (executive summary, technical details, risk rating, remediation guidance) and support retesting and closure
• Conduct or support red team / purple team exercises aligned to business risks and adversary techniques
• Collaborate with SOC, Blue Team and incident response teams while keeping offensive and defensive activities separate
• Improve methodologies, reusable playbooks and checklists and share knowledge

Required profile

• 3 to 4 years of hands-on experience in penetration testing and/or red teaming, with proven delivery of professional reports
• English at least B2-C1 (written and spoken)
• Ideal: German B2
• Ideal: relevant certifications such as OSCP, OSWE, GPEN or PNPT

Required skills

• Testing methodologies such as OWASP for web/API testing
• Offensive security tooling such as Burp Suite and Nmap, and scripting for automation
• Windows/Linux and networking fundamentals, troubleshooting and evidence capture
• Ability to turn technical findings into business-relevant risk language

What we offer

• Tailored training and development programmes
• Hybrid work model
• Wellness initiatives including psychological support sessions
• Volunteering opportunities and performance recognition

Candidates apply by submitting their CV in English through the EY GDS careers page.