Responsibilities
- Execute penetration tests across web applications, APIs, networks, mobile platforms, thick clients, and AI/LLM-based systems.
- Own, perform, and deliver security assessments and coordinate remediation activities.
- Develop, maintain, and validate AI-driven agents and tools for automating recurring testing tasks.
- Communicate service capabilities and test results to IT owners and stakeholders.
- Lead lessons-learned sessions and create educational materials for developers and other relevant parties.
- Collaborate with global IT application owners, information security specialists, and chief information security officers.
- Apply OWASP Top 10 knowledge, testing procedures, and remediation recommendations.
Requirements
- At least 5 years of experience in information security and penetration testing.
- Good understanding of software development and architecture, plus programming and scripting languages.
- Knowledge of ISO27001/2, NIST, and OWASP Top 10 security frameworks.
- Experience with Burp Suite, nmap, Qualys, Bruno/Swagger, SQLMap, Kali Linux, and other vulnerability-management or penetration-testing tools.
- Experience with cloud security and testing cloud environments.
- Ability to communicate complex technical concepts clearly to business and technical audiences.
- Strong communication and writing skills; English proficiency is required.
- Experience working in an international environment.
- Industry-relevant certifications such as SANS, CEH, Offensive Security, or eLearn Security are advantageous.
- Knowledge of advanced persistent threats, modern attack techniques, MITRE ATT&CK, SAST/DAST, cloud testing, and reverse engineering is advantageous.
- Experience developing agents and deploying or hosting AI tools using containers, servers, or APIs is advantageous.
Benefits
- Hybrid work arrangement balancing work from home and office premises.
- Spain base salary range of EUR 42,000 to EUR 70,000 for a full-time role.
- Eligibility for additional rewards, including an attractive performance-based bonus.
- Inclusive and flexible work environment with professional development support.
Categories
About Swiss Re
The Swiss Re Group is a leading wholesale provider of reinsurance, insurance and other insurance-based forms of risk transfer. Dealing direct and working through brokers, its global client base consists of insurance companies, mid-to-large-sized corporations and public sector clients. From standard products to tailor-made coverage across all lines of business, Swiss Re deploys its capital strength, expertise and innovation power to enable the risk taking upon which enterprise and progress in society depend. Founded in Zurich, Switzerland, in 1863, Swiss Re serves clients through a network of over 70 offices globally and is rated "AA-" by Standard & Poor's, "Aa3" by Moody's and "A+" by A.M. Best. Registered shares in the Swiss Re Group holding company, Swiss Re Ltd, are listed in accordance with the Main Standard on the SIX Swiss Exchange and trade under the symbol SREN. We're smarter together. For more information about Swiss Re Group, please visit: www.swissre.com, follow us on X @SwissRe and subscribe our YouTube channel @swissretv.