Pentester / Security Auditor

About the role

At Metrica España we continue to grow and are looking for a Pentester / Security Auditor to join a technological project specialized in cybersecurity.

You will participate in performing intrusion tests, ethical hacking, and technical security audits on web applications, mobile applications —Android and iOS—, APIs, and infrastructure. You will be part of a specialized team, in an environment that drives continuous learning, proactivity, and professional development.

What we're looking for

• Between 1 and 2 years of experience performing pentesting, ethical hacking, or technical security audit tasks.
• Experience in security audits of:
• Web applications.
• Android and iOS mobile applications.
• APIs.
• Infrastructure.
• Mastery and application of methodologies and frameworks such as:
• OWASP.
• OSSTMM.
• NIST.
• TIBER-EU.
• MITRE ATT&CK.
• Knowledge of security during the software development life cycle, including:
• Risk analysis.
• Threat modeling.
• Security testing.
• Knowledge of Linux and Windows systems.
• Experience in vulnerability management and/or analysis.
• Ability to prepare technical audit reports.
• Minimum English level B2.
• Teamwork, communication, and proactivity skills.
• Having, at least, one certification related to offensive security, such as OSCP, CEH, eJPT, eWPT, eCPPT, CRTP, CRTO, Burp Suite, eCPTX, CASE, or similar.

Nice to have

• Knowledge and handling of tools such as Nessus, Metasploit, Burp Suite, Acunetix, Cobalt Strike, or Nmap.
• Knowledge of security in cloud environments: AWS, Azure, and GCP.
• Programming and scripting knowledge with Shell Script, Python, Perl, Java, or other languages.
• Experience in the development of proprietary security tools.
• Participation in platforms and events such as CTFs, TryHackMe, or Hack The Box.
• Participation in cybersecurity talks, presentations, or communities.
• Experience in mentoring and technical support to other team members.

What you'll get

• Salary between €20,000 and €25,000 gross per year, depending on experience and value added.
• Possibility of receiving the salary in 12 or 14 payments.
• Stable contract
• Technological project specialized in cybersecurity.
• Ongoing training and professional development opportunities.
• Participation in innovative security audits and projects.
• Joining a technical, collaborative team oriented toward excellence.

If you are passionate about offensive cybersecurity, have experience performing technical audits, and want to continue growing in a specialized environment, we want to meet you!