{"id":2147232,"url":"https://alion.io/job/deloitte-penetration-tester","title":"Penetration Tester","company":{"id":2073222,"name":"Deloitte Spain","domain":"deloitte.es","url":"https://alion.io/company/deloitte-es","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Madrid, Spain"],"countries":["ES"],"hiring_countries":["ES"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":37000,"max_usd":90000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":629},"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Anthropic","optional":false},{"name":"Burp Suite","optional":false},{"name":"Kali Linux","optional":false},{"name":"Linux","optional":false},{"name":"LLM","optional":false},{"name":"Metasploit","optional":false},{"name":"Nmap","optional":false},{"name":"Obsidian","optional":false},{"name":"Ollama","optional":false},{"name":"OpenAI","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Postman","optional":false},{"name":"Prompt Engineering","optional":false},{"name":"SQLmap","optional":false},{"name":"Swagger","optional":false},{"name":"AI Agents","optional":true},{"name":"MITRE ATT&CK","optional":true}],"status":"live","first_seen_at":"2026-10-01T00:00:00Z","employer_posted_date":"2026-10-01","last_verified_at":"2026-10-12T11:28:29Z","board_verified":true,"closed_at":null,"days_open":11,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":11},"description":"Can you imagine taking part in the transformation of leading national and international organizations?\nAt Deloitte, we are committed to making an impact on society, our clients, and our people.\nIn this role you will be part of the Global Cyber Services team, delivering penetration testing services that combine tools, methodologies and manual analysis to evaluate and strengthen the security of applications, networks and environments for clients and the firm.\nKey responsibilities\nExecute penetration testing engagements across multiple attack surfaces: web applications, APIs, networks, mobile, thick clients and AI/LLM-based systems.\nDesign and perform automated and manual tests, producing clear, actionable, and prioritized findings for technical and non-technical audiences.\nUse and adapt testing platforms and tools (e.g., Kali Linux, Burp Suite, Nmap, Metasploit, sqlmap, AMASS, Postman/Swagger).\nApply AI and LLM techniques (prompt engineering, agents, emerging frameworks) to accelerate reconnaissance and to generate or refine testing scripts.\nDevelop, maintain, and validate AI-driven agents and tools to automate recurring testing tasks, reducing false positives and improving accuracy.\nEvaluate and integrate emerging AI-assisted offensive security tools into the team’s methodologies and playbooks.\nCreate and maintain technical documentation, methodologies, and standard operating procedures (SOPs).\nCommunicate service capabilities and test results effectively to clients and global stakeholders.\nWhat we’re looking for\n4+ years of experience in penetration testing, security assessment, or similar roles.\nHands-on experience with pentesting platforms and tools (Kali or another dedicated OS; Burp Professional, Nmap, Metasploit, sqlmap, AMASS, etc.).\nKnowledge of OWASP Top 10 and familiarity with API, thick client, and LLM/AI attack surfaces.\nExperience with AI models and frameworks (e.g., OpenAI, Anthropic) and tooling (Obsidian, Ollama) is a plus.\nScripting skills and working knowledge of at least one programming language and framework.\nAbility to work with diverse stakeholders and manage concurrent initiatives with good judgement and prioritization.\nStrong written and verbal communication skills in English; Spanish native or fluent is a plus.\nPreferred\nCertifications: OSCP, CEH, GIAC (GPEN, GSEC, GWAB, GMOB, GCPN) or equivalent.\nFamiliarity with MITRE ATT&CK, SAST/DAST, cloud testing, and reverse engineering.\nExperience in agentic development and deploying/hosting AI tools (containers, servers, APIs).\nExperience working in distributed teams and global projects.\nLimited immigration sponsorship may be available in some locations.\nWhat is it like to work at Deloitte?\nHigh-impact projects offering long-term growth and continuous learning opportunities.\nHybrid and flexible working model, with flexible hours and a healthy balance between remote work and collaboration in our offices or at client sites.\nA positive and collaborative work environment, with team-building activities, cultural and sports events throughout the year.\nHolistic wellbeing, supported by our physical, mental, and financial health programs, including on-site medical services.\nSocial impact, with access to a wide range of national and international volunteering initiatives and pro bono projects where you can contribute your time and talent.\nA strong feedback culture and continuous learning, within an inclusive environment that promotes equal opportunities and personalized development plans. You may even see yourself at Deloitte University in Paris.\nExclusive benefits, including a comprehensive benefits portfolio and a flexible compensation plan.\nNext steps:\nIf what you have read resonates with you, here is what comes next:\nApply to the position by clicking “Apply now” and completing your profile.\nIf your experience matches the role, our Talent team will contact you to get to know you better.\nStart your journey with Deloitte. We will guide you through each stage of the process until your onboarding.","description_format":"text","description_chars":4026,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"Spanish","level":"Proficiency (C2)","optional":true},{"language":"English","level":"All levels","optional":false}]},"benefits":["Continuous learning","Flexible schedule"],"hiring_locations":[{"name":"Spain","iso":"ES","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","Professional Services"],"lifecycle":[{"event":"open","at":"2026-10-09T04:37:08Z"}],"visa":[],"liveness":{"score":75,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.838,"p_room":0.9,"age_days":11,"expected_fill_days":27,"reasons":["conf:3","velocity","win:mid","comp:brand"],"computed_at":"2026-10-12T06:55:09Z"},"pay":null,"html_url":"https://alion.io/job/deloitte-penetration-tester","json_url":"https://alion.io/job/deloitte-penetration-tester.json","meta":{"generated_at":"2026-10-12T16:23:49Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":26166,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2073222},"rest":"https://alion.io/mcp/rest/get_company?id=2073222"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdeloitte-penetration-tester"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdeloitte-penetration-tester"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdeloitte-penetration-tester"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/deloitte-penetration-tester\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdeloitte-penetration-tester"}]}