Pentest Service Owner

At NextLink, we are looking for an experienced Pentest Service Owner to join our team and collaborate on a cybersecurity project for one of our leading clients in the pharmaceutical industry.

You will be responsible for managing and coordinating an enterprise penetration testing service, ensuring effective delivery, quality, and alignment with business risks and security priorities.

The role combines technical security expertise, service ownership, and vendor management, while contributing to the continuous improvement of offensive security capabilities through automation and emerging technologies.

Main Tasks

• Manage the penetration testing portfolio, including planning, risk-based prioritization, and delivery coordination.
• Translate business risks and technical requirements into effective testing objectives and scopes.
• Coordinate stakeholders, external security providers, and technical teams.
• Review and challenge testing methodologies, scopes, estimates, limitations, and proposed tester profiles.
• Ensure service quality, performance monitoring, and continuous improvement.
• Support the adoption of automation, Attack Surface Management (ASM), AI-assisted testing, and emerging offensive security technologies.

Requirements

Mandatory

• Proven experience in penetration testing, offensive security, or technical security assurance.
• Strong understanding of application, API, cloud, infrastructure, network, and identity security.
• Experience coordinating external providers and complex security engagements.
• Ability to assess and challenge technical testing approaches, methodologies, scopes, and estimates.
• Strong stakeholder management, service management, and communication skills.
• Ability to translate business risks into actionable security testing priorities.
• Professional proficiency in English, with a proactive and autonomous approach.

Desirable

• Hands-on experience in Penetration Testing, Red Teaming, Security Engineering, or Security Architecture.
• Familiarity with ASM, security automation, and AI-assisted penetration testing.
• Experience in enterprise cybersecurity services or regulated industries.

Location & Working Model

• Remote position. Barcelona-based candidates are preferred, but not mandatory. No regular office attendance required.