The English-language job board for Spain

Pentester

On-site in Madrid·Added 8 days ago (last checked 15 Oct)

KPMG

161 open roles

Apply

Overview

Work mode: On-site, Madrid
English: Required
Education: University degree

Visa options

The ad doesn’t mention sponsorship
No sponsorship mentioned, and this kind of work is rarely sponsored in Spain.

Find jobs with visa support

Skills

Nice to have

This job advert was originally written in Spanish.

Requirements

What we're looking for

Degree in Computer Engineering, Telecommunications, Cybersecurity, or related disciplines.
Experience or knowledge in penetration testing, vulnerability analysis, and offensive security.
Knowledge of network protocols, Windows and Linux operating systems, Active Directory, and cloud environments.
Familiarity with pentesting methodologies such as OWASP Testing Guide, PTES, or MITRE ATT&CK.
Proficiency with offensive security tools such as Burp Suite, Nmap, Metasploit, Nessus, Wireshark, or similar.
Ability to analyze vulnerabilities, assess risks, and propose mitigation measures.
Communication skills for the preparation of technical reports and presentation of results.
Sufficient level of English to work with technical documentation and in international environments.

Nice to have

Certifications such as OSCP, eJPT, PNPT, CEH, CRTO, or similar.
Experience in Red Teaming, web application audits, cloud security, or adversary simulation exercises.
Knowledge of programming or scripting (Python, PowerShell, Bash).
Participation in CTFs, ethical hacking labs, or security research.

The role

You will be part of offensive security projects, participating in the security assessment of infrastructures, applications, and corporate environments through controlled penetration tests. Your mission will be to identify real vulnerabilities, analyze their impact, and help organizations strengthen their cybersecurity posture.

What you'll do

Execute penetration tests on web applications, internal and external networks, cloud infrastructures, and corporate environments.
Analyze attack surfaces and identify vulnerabilities in systems, applications, and devices.
Technically validate the exploitation of vulnerabilities in authorized and controlled environments.
Simulate techniques, tactics, and procedures used by real attackers to evaluate the exposure level of assets.
Interpret results from security tools, discarding false positives and prioritizing risks.
Document technical evidence and prepare executive and technical reports with findings and recommendations.
Collaborate with development, infrastructure, and cybersecurity teams to define remediation plans.
Participate in Red Team exercises, security assessments, and continuous improvement projects regarding cybersecurity.

Hiring process

4 steps3 interviewsa task to do

CV screening
Phone screening
With People team · Phone call
A first contact call with the People team.
Online tests
Online test
Online English and psychometric tests.
Adventure Day
With People and business teams
A group business case led by the People and business teams.
Individual interview
With business team
Direct interviews with the selected business team.
Offer

Published process for internship programmes and the Graduate Program; the process for experienced hires is not described.

About KPMG

KPMG is one of the world's largest professional services networks, providing audit, tax, and advisory services to businesses, governments, and organizations. With a global presence spanning over 140 countries and territories, KPMG operates through member firms that employ more than 270,000 professionals worldwide. The firm is known for its expertise in financial auditing, risk consulting, and digital transformation, helping clients navigate complex regulatory and business challenges.

In Spain, KPMG has a strong presence with offices in major cities including Madrid, Barcelona, Bilbao, and others, offering a wide range of services from audit and tax to cybersecurity and data analytics. The Spanish arm is a key hub for the firm's European operations, and it actively recruits international talent through graduate programs and internships. KPMG Spain emphasizes innovation, with initiatives like the 'Rocket Program' and 'Tech Program' designed to attract young professionals into consulting, technology, and sustainability roles. The work culture is collaborative and fast-paced, with opportunities for cross-border projects and professional development, making it an attractive option for international professionals seeking to build a career in Spain.

Industry: Consulting
Founded: 1987
Employees: 250,000+
Headquarters: Amstelveen, Netherlands
In Spain: Madrid, Barcelona, Bilbao and 4 more
Website: kpmg.com

Good to know if you are moving

KPMG Spain offers structured graduate programs like the 'Rocket Program' and 'Tech Program' that are open to international candidates, providing a pathway into the Spanish job market.
The firm has offices in multiple Spanish cities, including Madrid, Barcelona, Bilbao, and Vigo, offering flexibility in location for relocating professionals.
KPMG Spain is committed to diversity and inclusion, with dedicated teams and programs focused on equity and inclusion, which can be supportive for international hires.
Working at KPMG Spain provides exposure to global clients and cross-border projects, enhancing career mobility within the KPMG network.
The company offers roles in high-demand areas like cybersecurity, data engineering, and sustainability consulting, which are relevant for professionals with these skills.

All open roles at KPMG