The English-language job board for Spain

Penetration Tester

Hybrid in Madrid·Full-time·Added today (last checked 4 Nov)

Swiss Re

19 open roles

Apply

Our summary

Salary: €42,000 - €70,000 a year
About €2,570 - €3,950 a month after tax.
Work mode: Hybrid, Madrid
Contract: Full-time
English: Required
Experience: 5+ years

Visa options

The ad doesn’t mention sponsorship
No sponsorship mentioned, and this kind of work is rarely sponsored in Spain.
Pay clears the EU Blue Card threshold
The advertised pay is over the €41,356 bar, so the route exists if Swiss Re uses it.

More jobs over the Blue Card threshold

Skills

Requirements

What we're looking for

At least 5 years of experience in information security and penetration testing
Good understanding of software development and architecture
Have good knowledge of programming and scripting languages
Sound understanding of security frameworks (ISO27001/2, NIST, OWASP Top 10)
Experience with vulnerability management and penetration testing tools (Burp Suite, nmap, Qualys, Bruno/Swagger, SQLMap, Kali Linux etc.)
Experience cloud security and testing cloud environments.
Ability to communicate complex technical concepts clearly and unambiguously to both business and technical audiences
Experience working in an international environment

Nice to have

Good communication and writing skills; proficiency in English is required, other languages are a plus
Industry-relevant certifications (SANS, CEH, Offensive Security, eLearn Security, etc.)
Knowledge of advanced persistent threats and modern attack techniques
Experience in agentic development and deploying/hosting AI tools (containers, servers, APIs)
Familiarity with MITRE ATT&CK, SAST/DAST, cloud testing, and reverse engineering

Pay & benefits

What you'll get

For Spain the base salary range for this position is between EUR 42,000 and EUR 70,000 (for a full-time role). The specific salary offered considers:

the requirements, scope, complexity and responsibilities of the role,
the applicant's own profile including education/qualifications, expertise, specialisation, skills and experience.

In the situation where you do not meet all the requirements or you significantly exceed these, the offered salary may be below or above the advertised range.

In addition to your base salary, you may be eligible for additional rewards and benefits including an attractive performance-based bonus.

The role

Join a team of cybersecurity professionals and help Swiss Re fulfil its mission to make the world more resilient.

As the Penetration Tester, you will improve and develop the strategy of penetration testing within Swiss Re, ensuring security assessments of web applications and APIs are delivered and remediations are coordinated and fulfilled.

What's more, you'll be working in a hybrid setup, perfectly balancing work from home and the office premises.

Nobody is perfect and meets 100% of our requirements. If you, however, meet some of the criteria below and are curious about the world of penetration testing inside a large reinsurance company, we'll be more than happy to meet you!

What you'll do

Execute penetration tests across multiple attack surfaces: web applications, APIs, networks, mobile, thick clients and AI/LLM-based systems
Efficiently own, perform and deliver security assessments
Develop, maintain and validate AI-driven agents and tools to automate recurring testing tasks, reducing false positives and improving accuracy
Communicate service capabilities and test results effectively to IT owners and stakeholders
Compile "lessons-learnt" sessions and educational material for IT developers and other relevant parties
Cooperate closely with global teams from IT application owners, information security specialists and chief information security officers
Be someone who believes in continuous innovation, is curious and relentless in finding a better way every day
Use your knowledge of Open Web Application Security Project (OWASP) Top 10 Vulnerabilities, testing procedures and remediation recommendations

About Swiss Re

The Swiss Re Group is one of the world's leading providers of reinsurance and insurance, working to make the world more resilient. Headquartered in Zürich, Switzerland, it has operations across the globe and around 15,000 employees.

Its business spans Property & Casualty Reinsurance, Life & Health Reinsurance and Corporate Solutions, alongside units such as Risk Data Solutions, Asset Management and Public Sector Solutions. The group's brand promise is "Partnering for Progress."

Employees: 15,000
Headquarters: Zürich, Switzerland

Good to know if you are moving

Several Madrid-based roles are advertised with a hybrid working set-up, e.g. "Senior Underwriter Surety (Hybrid, 80-100%)" and "Underwriting Analyst (Hybrid; m/f/x/d)".

In their own words

About the company & team

The Penetration Testing team simulates real-world cyberattacks on Swiss Re's computer systems, networks, applications, services and platforms. As part of the Group Security & Technology Platforms (GSTP) division, the team detects security weaknesses and fixes them before malicious hackers can exploit them.

We're looking for an experienced Penetration Tester who's ready to help us protect our digital assets through comprehensive testing, research, fixing and reporting. If this sounds like you, we'd like to hear from you!

Swiss Re is one of the world's leading providers of reinsurance, insurance and other forms of insurance-based risk transfer, working to make the world more resilient. We anticipate and manage a wide variety of risks, from natural catastrophes and climate change to cybercrime. Combining experience with creative thinking and cutting-edge expertise, we create new opportunities and solutions for our clients. This is possible thanks to the collaboration of more than 15,000 employees across the world.

Our success depends on our ability to build an inclusive culture encouraging fresh perspectives and innovative thinking. We embrace a workplace where everyone has equal opportunities to thrive and develop professionally regardless of their age, gender, race, ethnicity, gender identity and/or expression, sexual orientation, physical or mental ability, skillset, thought or other characteristics. In our inclusive and flexible environment everyone can bring their authentic selves to work and their passion for sustainability.

If you are an experienced professional returning to the workforce after a career break, we encourage you to apply for open positions that match your skills and experience.

We may use AI-powered tools to support the review and evaluation of applications for this position. These tools provide additional insights to our recruitment teams, but all hiring decisions are carefully reviewed and made by people. To learn more about how we use AI in recruitment and how we handle your personal data, please review our Data Privacy Statement before applying.

Keywords:
Reference Code: 139796

All open roles at Swiss Re