Manage and coordinate the enterprise penetration testing portfolio, ensuring alignment with business risks and security priorities. Oversee vendor relationships and drive continuous improvement through automation and emerging offensive security technologies.
At NextLink, we are looking for an experienced Pentest Service Owner to join our team and collaborate on a cybersecurity project for one of our leading clients in the pharmaceutical industry.
You will be responsible for managing and coordinating an enterprise penetration testing service, ensuring effective delivery, quality, and alignment with business risks and security priorities.
The role combines technical security expertise, service ownership, and vendor management, while contributing to the continuous improvement of offensive security capabilities through automation and emerging technologies.
Main Tasks
Manage the penetration testing portfolio, including planning, risk-based prioritization, and delivery coordination.
Translate business risks and technical requirements into effective testing objectives and scopes.
Coordinate stakeholders, external security providers, and technical teams.
Review and challenge testing methodologies, scopes, estimates, limitations, and proposed tester profiles.
Ensure service quality, performance monitoring, and continuous improvement.
Support the adoption of automation, Attack Surface Management (ASM), AI-assisted testing, and emerging offensive security technologies.
Requirements
Mandatory
Proven experience in penetration testing, offensive security, or technical security assurance.
Strong understanding of application, API, cloud, infrastructure, network, and identity security.
Experience coordinating external providers and complex security engagements.
Ability to assess and challenge technical testing approaches, methodologies, scopes, and estimates.
Strong stakeholder management, service management, and communication skills.
Ability to translate business risks into actionable security testing priorities.
Professional proficiency in English, with a proactive and autonomous approach.
Desirable
Hands-on experience in Penetration Testing, Red Teaming, Security Engineering, or Security Architecture.
Familiarity with ASM, security automation, and AI-assisted penetration testing.
Experience in enterprise cybersecurity services or regulated industries.
Location & Working Model
Remote position. Barcelona-based candidates are preferred, but not mandatory. No regular office attendance required.
“I was the first applicant for a remote marketing position that got listed on the company website the same day I applied. Had an interview within 48 hours!”
— Sarah J.
·
Marketing Manager
★★★★★
Verified
