At NextLink, we are looking for an experienced Pentest Service Owner to join our team and collaborate on a cybersecurity project for one of our leading clients in the pharmaceutical industry.
You will be responsible for managing and coordinating an enterprise penetration testing service, ensuring effective delivery, quality, and alignment with business risks and security priorities.
The role combines technical security expertise, service ownership, and vendor management, while contributing to the continuous improvement of offensive security capabilities through automation and emerging technologies.
Main Tasks
Manage the penetration testing portfolio, including planning, risk-based prioritization, and delivery coordination.
Translate business risks and technical requirements into effective testing objectives and scopes.
Coordinate stakeholders, external security providers, and technical teams.
Review and challenge testing methodologies, scopes, estimates, limitations, and proposed tester profiles.
Ensure service quality, performance monitoring, and continuous improvement.
Support the adoption of automation, Attack Surface Management (ASM), AI-assisted testing, and emerging offensive security technologies.
Requirements
Mandatory
Proven experience in penetration testing, offensive security, or technical security assurance.
Strong understanding of application, API, cloud, infrastructure, network, and identity security.
Experience coordinating external providers and complex security engagements.
Ability to assess and challenge technical testing approaches, methodologies, scopes, and estimates.
Strong stakeholder management, service management, and communication skills.
Ability to translate business risks into actionable security testing priorities.
Professional proficiency in English, with a proactive and autonomous approach.
Desirable
Hands-on experience in Penetration Testing, Red Teaming, Security Engineering, or Security Architecture.
Familiarity with ASM, security automation, and AI-assisted penetration testing.
Experience in enterprise cybersecurity services or regulated industries.
Location & Working Model
Remote position. Barcelona-based candidates are preferred, but not mandatory. No regular office attendance required.
All Job Ads are subject to GrabJobs’s Terms of Service. We allow users to flag postings that may be in violation of those terms. Job Ads may also be flagged by GrabJobs moderation team. However, no moderation system is perfect, and flagging a posting does not ensure that it will be removed.
Be the first to receive the latest Others Full-Time Jobs in the US.
Setup your job alert:
By activating job alerts, I agree to GrabJobs Terms & Privacy Policy. I can unsubscribe to job alerts anytime.
Skip
GrabJobs is the no1 job portal in the US, connecting you to thousands of jobs fast!
Find the best jobs in the US, apply in 1 click and get a job today!