SEAT S.A. is Spain's leading automotive manufacturer and a key subsidiary of the Volkswagen Group. Founded in 1950, the company designs, develops, and produces vehicles under the SEAT and CUPRA brands, operating a massive production facility in Martorell that stands as one of the most advanced automotive plants in Europe. The company is a major driver of industrial innovation in Spain, employing thousands of professionals across engineering, manufacturing, and digital services.

For international professionals, SEAT offers a multicultural environment within a global corporate structure. While Spanish is the primary language for many local operations, English is widely used in corporate, IT, and R&D departments due to its integration with the Volkswagen Group. The company is currently undergoing a significant transformation toward electrification and sustainable mobility, making it an attractive destination for tech talent and engineers looking to work on the future of the automotive industry.

Founded in 1950 by the Instituto Nacional de Industria to motorize post-war Spain, SEAT became a subsidiary of the Volkswagen Group in 1986. It has since evolved from a domestic manufacturer into a global exporter, launching the high-growth CUPRA brand in 2018.

For international professionals

Part of the Volkswagen Group, offering international career mobility and standardized global corporate benefits.
The main Martorell hub is located just 30km from Barcelona, allowing employees to live in the city while working at a major industrial site.
Offers a 'Smart Work' policy that provides flexibility and remote work options for many office-based and technical positions.
Highly international R&D and digital departments with employees from over 25 different nationalities.
Strong emphasis on continuous learning through the SEAT Academy and specialized training for electric vehicle technology.

Incident Response Pentester

SEAT

This job was originally posted in Spanish and automatically translated to English. You'll most likely need Spanish to apply.

Job Description

SEAT S.A. is the only company that designs, develops, manufactures, and markets automobiles in Spain. Part of the Volkswagen Group, the multinational is headquartered in Martorell (Barcelona). SEAT S.A. already offers the latest connectivity technology in its vehicle range and is immersed in a global digitalization process of the company to drive the mobility of the future.

"Inspire to Dare, To succeed, As a team" are the 4 values that guide us in our daily lives and in our relationships with our colleagues and stakeholders; they represent the essence of our culture and are our DNA.

At SEAT, we work with autonomy, live honesty, and courageously challenge the status quo. We continuously challenge ourselves because we believe we can achieve anything; we experiment and learn from mistakes when we get them wrong. We provide support and ask for help when necessary and, together, we share and celebrate successes.

The person will work within the IT security department and will carry out the following responsibilities:

Main Functions

* Carry out continuous attack surface analysis, identifying exposed assets, misconfigured services, obsolete technologies, and unauthorized changes, correlating findings with real exploitation risks.
* Perform penetration tests on applications, infrastructure, and external services, including enumeration, controlled exploitation, vulnerability validation, and the preparation of verifiable technical evidence.
* Collaborate with security, architecture, and operations teams to contextualize findings, prioritize remediations, propose hardening controls, and verify the effective mitigation of identified risks.
* Prepare technical and executive reports including impact, exploitability, evidence, and actionable recommendations, as well as present results in review sessions with technical teams and business owners.

Requirements

Education: Degrees in Technical Engineering or higher in Computer Science/Telecommunications/Mathematics/Physics or similar, as well as official certifications, will be valued.

Experience and Technical Knowledge:

* Offensive Pentesting (web, infrastructure, cloud) with mastery of methodologies such as OSSTMM, PTES, or MITRE ATT&CK, including real exploitation, development/adjustment of payloads, and advanced use of tools such as Burp Suite, Nmap, Metasploit, Impacket, or red team frameworks.

* Mapping and analysis of external attack surfaces: discovery of exposed assets, fingerprinting, enumeration, analysis of weak configurations, identification of attack paths, and risk assessment based on business context.
* Linux/Windows/MacOS/Public Cloud platforms.

* Knowledge of vulnerability management tools.

* Knowledge of OS at an administrator level (Windows/Linux/MacOS).

* Knowledge of scripting and automation in languages such as Python.

Languages: Technical English is essential.

Competencies:

* Ability to analyze complex information with a structured and methodical approach.

* Problem solving.

* Teamwork.

* Customer orientation.

* Efficiency and cost orientation.

* Passion for cybersecurity.

What do we offer?

* Competitive salary in accordance with our collective agreement.
* Collective transport to our workplaces (Barcelona and Martorell).
* Hybrid work model: 2 days of remote work per week.
* Subsidized dining service.
* Access to the SEAT medical center network.
* Collective life insurance.
* SEAT occupational pension plan starting from the 2nd month in the company.
* Purchase of new and used SEAT vehicles with special discounts.
* Advantages in SEAT vehicle leasing for employees.
* Possibility to request a personal loan starting from the second year.
* Continuous training through our internal Learning platform.
* Activities and discounts for SEAT employees.

At SEAT, we firmly believe in the strength of diversity and inclusion as fundamental pillars of our culture, where every person can be authentically free and freely authentic. We work with passion to create an environment where every voice is heard and valued, ensuring equal opportunities for all people, regardless of gender, sexual orientation, nationality, ethnicity, cultural identity, age, beliefs, or any other diversity.

Our commitment to diversity and inclusion is a priority that we demand of ourselves every day.

View original advert (Spanish)

SEAT S.A. es la única compañía que diseña, desarrolla, fabrica y comercializa automóviles en España. Integrada en el Grupo Volkswagen, la multinacional, con sede en Martorell (Barcelona). SEAT S.A. ya ofrece la última tecnología en conectividad en su gama de vehículos y está inmersa en un proceso de digitalización global de la compañía para impulsar la movilidad del futuro.

"Inspirar a Atreverse, Para tener éxito, Como un equipo", son los 4 valores que nos guían en nuestro día a día y en las relaciones con nuestros/as compañeras/os y stakeholders, representan la esencia de nuestra cultura y son nuestro ADN.

En SEAT, trabajamos con autonomía, vivimos la honestidad y desafiamos el statu quo con valentía. Nos retamos continuamente a nosotrxs mismxs porque creemos que lo podemos lograr todo, experimentamos y aprendemos de los errores cuando nos equivocamos. Damos apoyo y pedimos ayuda cuando es necesario y, juntas y juntos, compartimos y celebramos los éxitos.

La persona trabajará dentro del departamento de IT security y llevará a cabo las siguientes responsabilidades:

Funciones principales

* Llevar a cabo análisis continuo de superficie de ataque, identificando activos expuestos, servicios mal configurados, tecnologías obsoletas y cambios no autorizados, correlando hallazgos con riesgos reales de explotación.
* Realizar pruebas de intrusión en aplicaciones, infraestructura y servicios externos, incluyendo enumeración, explotación controlada, validación de vulnerabilidades y elaboración de evidencia técnica verificable.
* Colaborar con equipos de seguridad, arquitectura y operaciones para contextualizar hallazgos, priorizar remediaciones, proponer controles de hardening y verificar la mitigación efectiva de los riesgos identificados.
* Elaborar reportes técnicos y ejecutivos que incluyan impacto, explotabilidad, evidencia y recomendaciones accionables, así como presentar resultados en sesiones de revisión con equipos técnicos y responsables de negocio.

Requisitos

Formación: Se valorarán estudios de Ingeniería Técnica o superior en Informática/Telecomunicaciones/Matemáticas/Física o similares como certificaciones oficiales

Experiencia y conocimientos técnicos:

* Pentesting ofensivo (web, infraestructura, cloud) con dominio de metodologías como OSSTMM, PTES o MITRE ATT&CK, incluyendo explotación real, desarrollo/ajuste de payloads y uso avanzado de herramientas como Burp Suite, Nmap, Metasploit, Impacket o frameworks de red team.

* Mapeo y análisis superficies de ataque externas: descubrimiento de activos expuestos, fingerprinting, enumeración, análisis de configuraciones débiles, identificación de rutas de ataque y evaluación de riesgos basados en contexto de negocio.
* Plataformas Linux/Windows/MacOS/Cloud Públicos

* Conocimiento en herramientas de gestión de vulnerabilidades.

* Conocimiento de S.O. a nivel administrador Windows/Linux/MacOS

* Conocimiento en scripting y automatizaciones en lenguajes como python.

Idiomas: Inglés técnico imprescindible.

Competencias:

* Capacidad de análisis de información compleja con un enfoque estructurado y metódico.

* Resolución de problemas

* Trabajo en equipo.

* Orientación al cliente.

* Eficiencia y orientación al coste.

* Pasión con la ciberseguridad

¿Qué ofrecemos?

* Salario competitivo de acuerdo a nuestro convenio colectivo.
* Transporte colectivo a nuestros centros de trabajo (Barcelona y Martorell).
* Modelo de trabajo mixto: 2 días de teletrabajo por semana.
* Servicio de comedor subvencionado.
* Acceso a la red de centros médicos de SEAT.
* Seguro colectivo de vida.
* Plan de pensiones de empleo SEAT a partir del 2do mes en la compañía.
* Compra de vehículos nuevos y de ocasión SEAT con descuentos especiales.
* Ventajas en el leasing de vehículos SEAT para empleados/as.
* Posibilidad de solicitar un préstamo personal a partir del segundo año.
* Formación continua a través de nuestra plataforma interna de Learning.
* Actividades y descuentos para empleados SEAT.

En SEAT, creemos firmemente en la fuerza de la diversidad y la inclusión como pilares fundamentales de nuestra cultura, en la que toda persona pueda ser auténticamente libre y libremente auténtica. Trabajamos con pasión para crear un entorno donde cada voz sea escuchada y valorada, asegurando igualdad de oportunidades para todas las personas, sin importar género, orientación sexoafectiva, nacionalidad, etnia, identidad cultural, edad, creencias o cualquier otra diversidad.

Nuestro compromiso con la diversidad y la inclusión es una prioridad que nos exigimos a nosotrxs mismxs todos los días.