Pentest Service Owner | Pharma
我们正在寻找一个 Pentest 服务所有者，以领导和发展整个企业的透测试服务，确保在应用程序，云环境，基础设施，网络，API 和身份平台中有效安全保证。在这个角色中，你将作为商业风险，技术安全保证和服务交付之间的桥梁。你将拥有测试组合，协调利益相关方和外部提供商，优先根据风险评估，并确保对每个参与分配正确的测试能力。通过自动化，攻击面部管理，人工智能支持的测试和新兴安全技术也将有助于进攻性安全实践的发展。任务与责任：•拥有并管理企业透测试服务和投资组合。•推动在商业和技术领域中基于风险的优先考虑对染参与度。•协调内部利益相关者，安全团队和外部测试提供商以确保评估成功交付。•定义，审查和挑战测试范围，方法，估计，假设和参与目标。•确保每次评估都分配适当的测试能力和专业知识。•将商业风险和技术要求转化为有意义的透测试目标。•监督服务质量，交付性能，报告标准以及持续改进倡议。•审查测试结果并支持利益相关者了解风险，发现和补救优先事项。•与网络安全团队合作增强攻击性安全策略和测试框架。•推动服务内部创新，包括自动化，攻击面部管理，人工智能支持的测试和新兴攻击性的安全能力。•通过指标，利益相关者反和运营 KPIs 监测服务效率。SKILLS 必须有•对应用安全，API 安全，云安全，基础设施安全，网络安全和身份安全的强烈了解。•将业务风险和技术背景转化为实际有效的测试目标的能力。•强大的利益相关方管理和沟通技能。•经历多个利益相关者的服务，项目或与安全有关的任务管理。•挑战测试范围，方法，估计，限制和拟议的努力提供能力。
查看英文原文
We are looking for a Pentest Service Owner to lead and evolve an enterprise-wide penetration testing service, ensuring effective security assurance across applications, cloud environments, infrastructure, networks, APIs, and identity platforms.
In this role, you will act as the bridge between business risk, technical security assurance, and service delivery. You will own the pentesting portfolio, coordinate stakeholders and external providers, prioritize assessments based on risk, and ensure the right testing capabilities are assigned to each engagement. You will also contribute to the evolution of offensive security practices through automation, attack surface management, AI-supported testing, and emerging security technologies.
TASKS & RESPONSIBILITIES 🚀
• Own and manage the enterprise penetration testing service and portfolio.
• Drive risk-based prioritization of pentesting engagements across business and technology domains.
• Coordinate internal stakeholders, security teams, and external testing providers to ensure successful delivery of assessments.
• Define, review, and challenge testing scopes, methodologies, estimates, assumptions, and engagement objectives.
• Ensure the appropriate testing capabilities and expertise are assigned to each assessment.
• Translate business risks and technical requirements into meaningful penetration testing objectives.
• Oversee service quality, delivery performance, reporting standards, and continuous improvement initiatives.
• Review testing outcomes and support stakeholders in understanding risks, findings, and remediation priorities.
• Collaborate with cybersecurity teams to enhance offensive security strategies and testing frameworks.
• Drive innovation within the service, including automation, attack surface management, AI-supported testing, and emerging offensive security capabilities.
• Monitor service effectiveness through metrics, stakeholder feedback, and operational KPIs.
SKILLS 🤹
Must Have
• Strong understanding of Application Security, API Security, Cloud Security, Infrastructure Security, Network Security, and Identity Security.
• Ability to translate business risks and technical contexts into practical and effective testing objectives.
• Strong stakeholder management and communication skills.
• Experience managing services, projects, or security-related engagements involving multiple stakeholders.
• Ability to challenge testing scopes, methodologies, effort estimations, limitations, and proposed delivery approaches.
• Strong analytical and decision-making capabilities.
• Professional proficiency in English.
Nice to have ⭐
• Experience in Penetration Testing, Offensive Security, Red Teaming, or Technical Security Assurance.
• Experience coordinating external security vendors and complex security engagements.
• Previous hands-on experience in Penetration Testing, Security Engineering, Security Architecture, or Red Team operations.
• Familiarity with Attack Surface Management (ASM) solutions and security automation initiatives.
• Exposure to AI-assisted security testing and emerging offensive security technologies.
• Experience working within large enterprise environments.
• Relevant cybersecurity certifications such as OSCP, OSCE, CISSP, CISM, CRTO, CREST, or similar.
WHAT SUCCESS LOOKS LIKE 🎯
• Penetration testing activities are delivered efficiently and aligned with business risk priorities.
• The right testing methodologies and expertise are consistently applied to every engagement.
• Stakeholders receive actionable security insights that improve the organization's security posture.
• External providers operate effectively within defined quality and performance standards.
• The pentesting service continuously evolves through automation, improved processes, and emerging offensive security capabilities.
• Security assurance activities provide measurable value and support informed risk-based decision making.
SCHEDULE 🕘:
- 08h-17h from Monday to Friday (flexible)
- Full remote
- No office attendance needed, Barcelona location is recommendated but not mandatory
CONDITIONS 🌱:
- Salary package based on your profile.
- Ticket restaurant included in-office hours.
- Flexible compensation plan (free of income tax) where we provide you with medical insurance, public transport ticket and childcare check.
- Discounts in gym network.
- Training catalogue.
Our goal is that you are well in every way!
Originally posted on Himalayas