Penetration Tester

Junior Penetration Tester | 100% REMOTE - Spain

Since 2011, SQUAD Group has been a key player in the cybersecurity landscape. We partner with leading organizations to protect their information systems through a comprehensive 360° offering of consulting, integration, expertise, and managed services

Our mission: Securing Together

We believe in a collaborative approach to cybersecurity, where experts and clients work hand-in-hand to anticipate threats and protect critical infrastructure.

As part of our growing team, we're seekin g a Senior Security Engineer specialising in Vulnerability Manage ment. Based in Barcelona, this role will put you at the heart of a high-impact security engineering function, building and operating the systems that keep complex, large-scale environments continuously protected.

Your Role

You are a hands-on, curious security tester joining a pentest practice focused on web, mobile, and API applications. Working alongside senior pentesters on long-running client missions, you'll conduct hands-on assessments, document findings clearly, and grow into more autonomous engagements over time.

Your Responsibilities

• Conduct penetration tests on web applications, APIs, and mobile apps, following OWASP methodologies (OWASP Top 10, ASVS, MASVS).
• Perform manual and tool-assisted vulnerability discovery (Burp Suite, OWASP ZAP, Nmap, and similar tooling).
• Reproduce, validate, and document vulnerabilities with clear technical evidence and business-risk framing.
• Write clear, well-structured pentest reports and executive summaries in English for international clients.
• Support remediation discussions with development teams, explaining findings and validating fixes.
• Contribute to internal methodology, checklists, and knowledge-sharing within the pentest team.
• Work on long-duration client missions, maintaining consistent quality and communication throughout the engagement.

What You Bring

• 3 years of experience in Cybersecurity, including at least 1 year dedicated to application penetration testing.
• Solid understanding of web application vulnerabilities (injection, authN/authZ flaws, SSRF, IDOR, etc.) and common exploitation techniques.
• Working knowledge of Burp Suite, ZAP, and standard recon/exploitation tooling.
• Basic scripting ability (Python or Bash) to support testing and automation.
• Fluent professional English, spoken and written — required for client-facing missions and report writing.
• Comfortable working independently on long missions while staying aligned with senior pentesters and client stakeholders.

Preferred Certifications: eJPT, eWPT, OSCP (in progress or recently obtained), or equivalent hands-on offensive security credentials.

Why Join Squad?

Personalized Growth: We help you build a training and certification plan aligned with your professional goals through our SquadExeperience

• Expertise Development: Participate in internal events like our MixYourTalent webinars and monthly C TF sessions .
• Visibility: Attend major industry conferences and contribute to our #TheExpert tec hnical b log
• Culture: Enjoy a dynamic and close-knit environment with after-work events and team gatherings that foster great camaraderie.